Hi,
this patch adds the config option ldap_tls_cacert and ldap_tls_cacertdir to specify the location of CA certificates. If they are not used in sssd.conf the system defaults as defined in /etc/openldap/ldap.conf will be used. I also extended the sssd-ldap man page.
This patch should fix #201 and #202.
bye, Sumit