I'm sending updated set of patches. All your comments were addressed, I also added man page updates and one modification to sdap_parse_search_base() which can be now used for at more places in IPA provider.
Thanks Jan
I am unable to get sssd to turn any netgroup over with: getent netgroup <netgroupname>
When I do a tcpdump, I don't see any attempt at communicating with the IPA server at all.
Am I missing some initiation value in the sssd.conf?