add ldap configuration for centos (6) machines via sssd
use ldap attrs for idmapping in ad, not objectid-derived ones. use rfc2307bis schema for fastery group unrolls.