Title: #5847: pam_sss: Allow offline authentication against non-ipa-desktopprofiles aware
In FreeIPA, if desktop profiles' support is enabled, the data is in replicated tree.
This means you should be able to retrieve all the data from any IPA server. If desktop
profiles' support is not enabled, nothing will be available at any server.
In both cases lack of fetched rules or missing desktop profiles support have the same
meaning for the client. Probably not worth storing this difference.
See the full comment at https://github.com/SSSD/sssd/pull/5847#issuecomment-960937327