Title: #603: AD/LDAP: Do not misuse the ignore_mark_offline to check if a connection
needs to be checked for POSIX attribute presence
The logic behind deciding whether to check if a server contains any POSIX
attributes used the ignore_mark_offline flag. This was OK for some time,
because this flag was only set for to true for Global Catalog connections,
which are those that we need to check.
However, in recent releases, the flag was also set for any connection
towards a trusted domain. This had the unintended effect that any lookup,
LDAP or GC against a trusted domain ran the wide POSIX presence check.
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/603/head:pr603
git checkout pr603