URL:
https://github.com/SSSD/sssd/pull/488
Title: #488: Two fixes for certificates in idoverrides
sumit-bose commented:
"""
Yes, only 'ipa: remove SYSDB_USER_CERT from sub-domain users' (4300385) needs to
be backported from this PR. The other two commit @jhrozek mentioned are for ssh public
keys.
"""
See the full comment at
https://github.com/SSSD/sssd/pull/488#issuecomment-368822066