this patch set tries to fix https://fedorahosted.org/sssd/ticket/2101 .
Currently we rely on the fact that the external mapping is the default
in the case of an error. But this leads to a loot of useless CPU cycles
and maybe irritating error messages. With this patch set each trusted AD
member domain gets a proper range assigned if the forest root is
configured to manage the POSIX attributes.
these two patches are the SSSD part to fix
https://fedorahosted.org/sssd/ticket/2030 . To reset the timeouts I
introduced a new callback type which is always executed if SIGUSR2 (go
online immediately) is received in contrast to the default online
callback which are only executed if the backend was offline before.
If the patch are accepted I will send corresponding ones to FreeIPA to
send the signal if 'ipa trust-add' is run as root.
I realized this might be a nice chance when I was working on #2079. In
the server mode, the IPA sites should be ignored, I think. But I don't
think this patch is too important as IPA sites are still only