On Tue, Jul 27, 2021 at 5:49 PM James Ralston <ralston(a)pobox.com> wrote:
If you cannot put certificates into the userCertificate field in AD,
the only work-around is to upgrade to sssd 2.1.0 or later.
(We briefly considered doing that on RHEL7, but quickly abandoned it
due to the effort involved.)
`sss-certmap` was backported to 1-16 upstream branch via
https://github.com/SSSD/sssd/pull/5176
and later backported to RHEL7 starting with sssd-1.16.5-10.el7_9.7
(
https://bugzilla.redhat.com/show_bug.cgi?id=1736845)