SDAP: Properly handle group id-collision when renaming incomplete groups Resolves: https://pagure.io/SSSD/sssd/issue/2653 Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com> Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>

LDAP: refactor sdap_ad_tokengroups_initgr_mapping_done() The group-processing is moved out to make it reusable. Reviewed-by: Pavel Březina <pbrezina@redhat.com>

SDAP: make some AD specific calls public Make sdap_ad_tokengroups_get_posix_members() and sdap_ad_resolve_sids_send() reusable. Reviewed-by: Pavel Březina <pbrezina@redhat.com>