[SSSD] Subdomains and access provider

[Dmitri Pal]

Hello,

When one uses SSSD with AD provider but user comes from a subdomain
there are implications for the access provider. AFAIU we have a ticket
for simple access provider: https://fedorahosted.org/sssd/ticket/2034
but what about other access providers? What are the implications? And
what would be the best practices in configuring SSSD in this case? What
access provider would we recommend?

I envision a wiki page titled: "HOWTO/Selecting the best access control
configuration for the SSSD AD provider". That should cover different use
cases and give recommendations based on the use case.