707fdf0 ipa: add failover to access checks

1 file Authored by sbose 4 years ago, Committed by pbrezina 4 years ago,
    ipa: add failover to access checks
    
    While reading the different components of the HBAC rules failover
    handling was missing. Since the access control is typically the second
    step after authentication SSSD would have already switched to a working
    server or into offline mode during authentication. But if e.g. ssh keys
    are used for authentication and user data are read from cache the HABC
    rule searches might have to handle failover as well.
    
    Related to https://pagure.io/SSSD/sssd/issue/4114
    
    Reviewed-by: Michal Židek <mzidek@redhat.com>