[SSSD-users] Re: Nested LDAP groups and filtering