ehlo
The first patch is sligtly modified version of Michal's patch.
It depends on patch for config snippet. Because config
validation is optional if it isn't supported in libini_config.
And detection for new libini_config is in patch for config snippets
You might see "typos" in sssd.log
e.g.
(Thu Jun 23 10:48:39:370079 2016) [sssd] [sss_ini_call_validators] (0x0020):
[rule/allowed_domain_options]: Attribute 'ldapi_uri' is not allowed in section
'domain/example.com'. Check for typos.
BTW don't forget to build with ding-libs-0.6 (libini_config 1.3.0)
LS