Currently only the group SIDs from a PAC are used to find out about the membership in local groups. The user SID should be used as well.
Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=878480
master: c5e055a
ipa-3-0: 22c752c
Rename component.
Metadata Update from @sbose: - Issue assigned to sbose - Issue set to the milestone: FreeIPA 3.0.2
Login to comment on this ticket.