Title: #270: Subdomains direct integration
Btw, we fixed practically the same issue in IPA subdomains code (from users perspective).
The code for direct integration is completely different, but maybe we could reuse the same
(*me: runs to catch the train... spent much more time with this then expected)
See the full comment at https://github.com/SSSD/sssd/pull/270#issuecomment-300900597