https://fedorahosted.org/sssd/ticket/926
There's one more branch where the RDN attribute name matches the naming
attribute name but value is not found in the naming attribute values. I
didn't touch that one because I wanted to loosen the rules as little
as possible.
Ack,
just one small note: I'd change the debug level to something different than
fatal error.
Jan