Upstream ticket:
https://fedorahosted.org/sssd/ticket/2632

*** Bug 1214673 has been marked as a duplicate of this bug. ***

* master: 3453e4734d2f7738034af61edb7d33c0c7095d8a
* sssd-1-12: 85287a6b897d818d279171a83aa3c8a0de66f13b

Verified on RHEL7.2 and Windows 2012 R2.

sssd-1.13.0-35.el7.x86_64

Obseravtions: 
On Client group resolve doesn't fail prior to login. Group membership are resolved even if user login hasn't been done.

1. [root@ipa02 sssd]# ipa idoverrideuser-find 'default trust view' test11@test.in
---------------------------
0 User ID overrides matched
---------------------------
----------------------------
Number of entries returned 0
----------------------------

2. [root@ipa02 sssd]# service sssd stop ; rm -f /var/lib/sss/{db,mc}/* ; service sssd start
Redirecting to /bin/systemctl stop  sssd.service
Redirecting to /bin/systemctl start  sssd.service

3. [root@ipaclient02 ~]# service sssd stop; rm -rf /var/lib/sss/{db,mc}/*; service sssd start
Redirecting to /bin/systemctl stop  sssd.service
Redirecting to /bin/systemctl start  sssd.service

4. [root@ipaclient02 ~]# id test11@test.in
uid=10010(test11@test.in) gid=10000(grp2@test.in) groups=10000(grp2@test.in),10010(domain users@test.in)

===================================================
1. [root@ipa02 sssd]# ipa idoverrideuser-add 'default trust view' test11@test.in --login puser1
---------------------------------------
Added User ID override "test11@test.in"
---------------------------------------
  Anchor to override: test11@test.in
  User login: puser1

2. [root@ipaclient02 ~]# id test11@test.in
uid=10010(puser1@test.in) gid=10000(grp2@test.in) groups=10000(grp2@test.in),10010(domain users@test.in)

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHSA-2015-2355.html