Title: #813: SDAP: allow GSS-SPNEGO for LDAP SASL bind as well
LGTM, would it make sense to have a followup where GSS-SPNEGO is made
the default for the AD backend?
GSS_SPNEGO is more efficient as it requires less roundtrips.
Yes, that's the plan, see https://pagure.io/SSSD/sssd/issue/4007
While testing the patch I found that there are issues with GSS-SPNEGO with
cyrus-sasl-2.1.26 while cyrus-sasl-2.1.27 worked fine. I'd like to run some more tests
to see if it would makes sense to not change the default for the AD provider if
cyrus-sasl-2.1.26 is installed.
See the full comment at https://github.com/SSSD/sssd/pull/813#issuecomment-491867722