Title: #269: Add support for ActiveDirectory's logonHours restrictions
@NWilson would you like me to help move this PR forward by writing a
patch on top of yours that allows configure-time selection of the default?
I would rather prefer to set default value of option to NULL rather then creating
configure time option for any new "controversial" feature. + update man page for
BTW man `sssd-ldap` says that default value of `ldap_user_ad_logon_hours` is `logonHours`
But such attribute is not part of rfc2307 or rfc2307 bis schema. So it should not be set (
== NULL) for standard ldap schemas anyway.
See the full comment at https://github.com/SSSD/sssd/pull/269#issuecomment-304313809