URL:
https://github.com/SSSD/sssd/pull/307
Title: #307: IPA: Only attempt migration for the joined domain
jhrozek commented:
"""
Sure, just type in a wrong password when authenticating as a user from an IPA-AD trust.
With the patch, you will see the migration being tried as well, without the patch, the PAM
request should just shortcut.
"""
See the full comment at
https://github.com/SSSD/sssd/pull/307#issuecomment-318285876