I would say we want to include:
https://fedorahosted.org/sssd/ticket/3110 - Access denied after
activating user in 389ds
https://fedorahosted.org/sssd/ticket/3120 - SSSD fails to start
when ldap_user_extra_attrs contains mail
https://fedorahosted.org/sssd/ticket/3101 - sssd does not start if
sub-domain user is used with simple access provider
When these are included, I would like to tag 1.14.1. Any other opinions?