Hi,
the attached patches are a short-term fix until subdomains can be
configured separately in the config file. They add a new option
subdomain_inherit and make it possible to inherit three options we
learned our users care about for subdomains - ignore_group_members,
ldap_purge_cache_timeout and ldap_use_tokengroups.