Hi,
currently we trust the idrange data we get from the IPA server. But it
turned out that some checks are missing on the server
(
https://fedorahosted.org/freeipa/ticket/4137) so SSSD should check the
input before saving the data to the cache.
The first two patches make some code which already exists available for
other callers. The third contains the actual functionality.
bye,
Sumit