A rootless container runtime works for local users and fails for an LDAP...

The runtime is installed correctly, yet one user cannot launch containers because the subordinate ID map overlaps with an old identity record.