URL:
https://github.com/SSSD/sssd/pull/438
Title: #438: krb5_child: Distinguish between expired & disabled AD user
sumit-bose commented:
"""
Hi Lukas,
thank you for the patch. I will have a close look at the code later but I think the
general approach is good.
I'm just wondering if we should enable it by default and add an option to switch to
the plain libkrb5 call for environments where the master KDC lookup is really needed (and
works)? What do you think?
"""
See the full comment at
https://github.com/SSSD/sssd/pull/438#issuecomment-347840054