When we implemented groups in v2 long ago the default was that new
groups would be non-POSIX unless specifically requested. It was possible
to convert a non-POSIX group to POSIX later (but not the other way around).
The SSSD guys have asked that this be reversed, that the default stance
by all groups are POSIX unless otherwise requested.
Freeipa-devel mailing list