a52226c ipa: compare DNs instead of group names in ipa_s2n_save_objects()

1 file Authored by sbose 6 years ago, Committed by lslebodn 6 years ago,
    ipa: compare DNs instead of group names in ipa_s2n_save_objects()
    
    If group names are used to compare the current list of group memberships
    returned by the server with the one from the cache some groups might end
    up in the wrong result list if group names are overridden. This
    ambiguity can be resolved by using the DNs of the cached objects.
    
    Related to https://pagure.io/SSSD/sssd/issue/3579
    
    Reviewed-by: Fabiano FidĂȘncio <fidencio@redhat.com>