Using python3-libsss_nss_idmap 1.15.3-1.fc26 from copr freeipa/freeipa-master

pysss_nss_idmap.SID_KEY, pysss_nss_idmap.TYPE_KEY and pysss_nss_idmap.NAME_KEY are defined as strings ('sid', 'type' and 'name') but cannot be used as keys in the results returned by pysss_nss_idmap.getsidbyname or pysss_nss_idmap.getnamebysid.

For instance, the output of getnamebysid looks like: {b'name': 'userlogin@domain.com', b'type': 3}
and result.get(pysss_nss_idmap.TYPE_KEY) or result.get(pysss_nss_idmap.NAME_KEY) fail.

The output of getsidbyname looks like: {'userlogin@domain.com': {b'sid': 'S-1-5-21-4185955025-1922848022-3738247038-1116', b'type': 3}}.

There is a mismatch between the constant types and the key types.

In order to reproduce the issue:
install ipa server, create a winsync replication agreement, then add a trust to AD and use ipa-winsync-migrate with python3 -bbE. The tool displays for each user entry to migrate:
Migration failed: userlogin@domain.com (Comparison between bytes and string)