9d7da2b
Use LDAP modify operation directly to add/remove group members. This prevents getting full member list from LDAP and putting it back later. https://fedorahosted.org/freeipa/ticket/3706