Description of problem:

In sssd there is no way to limit the LDAP users that appear on a machine; ldap_access_filter only limits the users who can log in.  This isn't very useful if you're using means other than LDAP for authentication, and yet want to use LDAP to control access.  Other reasons for this not being ideal are listed in https://fedorahosted.org/sssd/ticket/647

Version-Release number of selected component (if applicable):

1.5.1-34.el6_1.3

How reproducible:

Always.

Steps to Reproduce:

1. Install and configure sssd to use LDAP
2. Search in vain for a way to filter the LDAP users that appear on a box.
  
Actual results:

There is no way to filter LDAP users, just LDAP authentication.

Expected results:

There totally should be.

Additional info:

Fix and further discussion at https://fedorahosted.org/sssd/ticket/647.