On (11/09/17 07:42), Igor Sever via FreeIPA-users wrote:
Can I use FreeIPA as Kerberos and LDAP provider (not as IPA) and still
use policies somehow?
Yes you can, but sssd-188.8.131.52 was quite broken and contained many bugs.
1.11.8 should be much better but from sssd upstream POV 1.13 is long term
maintenance branch. Older branches are not supported by upstream anymore.