6262280 Fix sssd.conf to always have IPA certificate for the domain.

1 file Authored by abbra 12 years ago, Committed by rcritten 12 years ago,
    Fix sssd.conf to always have IPA certificate for the domain.
    
    Fixes https://fedorahosted.org/freeipa/ticket/1476
    
    SSSD will need TLS for checking if ipaMigrationEnabled attribute is set
    Note that SSSD will force StartTLS because the channel is later used for
    authentication as well if password migration is enabled. Thus set the option
    unconditionally.