SSSD experts - Is it possible to simplify ldap searches like the one below to specify the group name without it's full path: ``` ldap_user_search_base="DC=example,DC=internal?subtree?(|(memberOf=CN=project-users,OU=2,OU=1,DC=example,DC=internal)(memberOf=CN=project-admins,OU=2,OU=1,DC=example,DC=internal)) ``` Doing so would simplify configurations and prevent issues when objects are moved within the directory: *p.s. for access_provider, the following has worked to simplify part of our config. Likely means less load on LDAP. I'm assuming it's safe.* ```` id_provider=ldap access_provider=simple simple_allow_groups=group1, group2 ``` -- Sean Roberts