Title: #376: Fix two issues related to certificate mapping
IPA: fix handling of certmap_ctx
This patch fixes a use-after-free in the AD provider part and initializes
the certmap_ctx with data from the cache at startup.
certmap: make sure eku_oid_list is always allocated
If there are only OIDs in a <EKU> part of a matching rule a NULL pointer
dereference might occur.
Related to https://pagure.io/SSSD/sssd/issue/3508
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/376/head:pr376
git checkout pr376