Hi,
https://fedorahosted.org/sssd/ticket/1635 was reopened because the
provided patch didn't fix the problem for the reporter. I think the
issue is that although we do lookups for all different types of
principals we do not lookup the plain names given by ldap_sasl_authid.
This is fixed by the first patch.
The second patch changes to order of the lookups by moving a wildcards
search after a specific one. I think it make sense to change it this way
but since the old order is used since some time chances are that this
change might break some setups. If you think the old order is better or
changing the order is too risky, please just ignore this patch.
bye,
Sumit