This patch (hopefully) fixes an interop issues with AD servers where they fail to realize the connection is indeed integrity protected.
It's a bit of a hack as we need to work around openldap initialization of cyrus sasl libraries. But it should work unitl we get openldap libraries to expose SASL_CB_GETOPT to us.
Ticket: https://fedorahosted.org/sssd/ticket/2040
Simo.