8f9d768 IPA: properly handle groups from different domains

1 file Authored by lslebodn 9 years ago, Committed by sbose 9 years ago,
    IPA: properly handle groups from different domains
    
    When groups are resolved on IPA clients as part of a user lookup not all
    groups have to be from the same domain as the used. This has to be
    checked to store the group object properly in the cache.
    
    Related to https://fedorahosted.org/sssd/ticket/2529
           and https://fedorahosted.org/sssd/ticket/2524
    
    Reviewed-by: Sumit Bose <sbose@redhat.com>