Title: #275: Implement access verification by rhost using ldap_access_order rhost option
Meanwhile I did not find how can I add extra LDAP field to be
retrieved (with default value) that would be outside of RFC scopes? Adding them directly
into RFC scope breaks tests and I do not feel like adding field to AD and other providers
since don't think this feature is applicable there.
You can check following commit 3cf7fdfcaedb986f42a6640e26aa057007b64045.
It added a new optiona and default value was set only for IPA provider.
See the full comment at https://github.com/SSSD/sssd/pull/275#issuecomment-312612850