Was that bug per chance
https://pagure.io/SSSD/sssd/issue/3425 ?
On 8 Dec 2017, at 11:57, Franky Van Liedekerke
<liedekef(a)telenet.be> wrote:
Fun fact just for info: we had to switch to rfc2307 (from 2307bis) because of another bug
in sssd that ignores the setting to not do nested group searches, which resulted in a huge
amount of extra ldap searches per user (1 per group).