Description of problem:

It looks like the associated patch added a new option ...

ldap_user_authorized_host = str, None, false 


associated option in man page ...

       ldap_user_authorized_host (string)
           If access_provider=ldap and ldap_access_order=host, SSSD will use the presence of the host attribute in the user's LDAP entry to determine access privilege.

           An explicit deny (!host) is resolved first. Second, SSSD searches for explicit allow (host) and finally for allow_all (*).

           Default: host



Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.
  
Actual results:


Expected results:


Additional info:

Upstream ticket :: https://fedorahosted.org/sssd/ticket/746