I got 2 domains configured in sssd and the id cmd behaves odd:
gentoo-LABBBB sssd # id jocke(a)transmode.se
uid=1001(jocke) gid=100(users) groups=100(users),10(wheel),14(uucp),18(audio),27(video),250(portage),101(vboxusers),998(plugdev),78(kvm),900(libvirt),977(docker),1172001133(s all employees),1172056192(se-rnd-ts-1100),1172001161(all employees),1172000513(domain users),1172056141(se-it-group),1172056172(se-rnd-hw),1172056180(se-rnd-sw),1172056169(se-rnd)
gentoo-LABBBB sssd # id jocke(a)infinera.com
uid=1172051010(jocke) gid=1172056169(se-rnd) groups=1172056169(se-rnd),10(wheel),14(uucp),18(audio),27(video),250(portage),101(vboxusers),998(plugdev),78(kvm),900(libvirt),977(docker),1172001133(s all employees),1172056192(se-rnd-ts-1100),1172001161(all employees),1172000513(domain users),1172056141(se-it-group),1172056172(se-rnd-hw),1172056180(se-rnd-sw)
Notice how uid/gid differs but the group names are the same(they should not be)
It turns out that the "groups" list depends on the
domains = infinera.com,transmode.se
setting. Whichever is first wins.
Thoughts? Using sssd-1.13.4
Jocke