[SSSD] [sssd PR#209][+Accepted] IPA: lookup AD users by certificates on IPA clients