I second this request. We have IPA/IDM configured with a one way trust to AD and it is
working well. Yet we would like to have user Auth to LDAP in IPA/IDM and one (among
others) fields that cannot be seen via LDAP queries is the AD Email field.
This really stops the auth in most cases. There are other fields we need as well but this
one is critical.