From attempts to test the proposed fix for T144943: Groups and tools only refreshed at login:

In https://gerrit.wikimedia.org/r/c/labs/striker/+/1009232, @taavi wrote:

This is unfortunately untested as the Keystone container in my local dev env seems to be having some problems.

In https://gerrit.wikimedia.org/r/c/labs/striker/+/1009232, @bd808 wrote:

My keystone container is also segfaulting when I try to submit a membership approval. Based on the state of my local database and ldap directory, I don't think I ever tested an account approval since updating the Keystone to 2023.1 in 128d448d4e340c9d2af3632458fb78d7bc478770 (circa 2023-08-04). Fun times.