Issue

• We're running into an issue with the auto private groups feature which was added in SSSD. As the auto private groups feature
  was specified in the RFE https://bugzilla.redhat.com/1327705, SSSD was to automatically create the group on the client only if the user object's uidNumber and gidNumber are the same in AD. What we are seeing, however, is that the private group is being created regardless of the gidNumber. For example:

$ aduser --query --user myuser | egrep '^uid|uidNumber|gidNumber|gecos' 
uid: myuser 
uidNumber: 153313906
gidNumber: 183244178
gecos: myuser 

With older SSSD:

$ id myuser 
uid=153313906(myuser) gid=183244178(biggroup) groups=183244178(biggroup) 

With SSSD 1.16 and auto private groups:

$ id myuser 
uid=153313906(myuser) gid=153313906(myuser) groups=153313906(myuser),183244178(biggroup)