Hi,
this patch-set should solve
https://fedorahosted.org/sssd/ticket/2158 by
moving the main processing of the PAC data to the backends. The PAC
responder now only has to send one request to the backend to look up the
user based on its SID if the user's SID was not found in the cache. I
used the new cache_req here so the patches depend on Pavel's latest
cache_req patches which are currently under review.
Since new IPA server can provided group-membership data to IPA clients
via the extdom plugin the most important test-cases are currently
against older IPA servers e.g. version 3.3.3 provided by RHEL/CentOS 7.0
(7.1 already has a newer version with enhanced extdom plugin).
bye,
Sumit