97445b2
Refactor indirect membership processing. A single LDAP search is now used instead of one search per member. https://fedorahosted.org/freeipa/ticket/3971