The sssd role has been deactivated in favor of the new sssd module, because the module is able to adapt an existing configuration.

The advantage of the use of SSSDConfig is that an existing configuration could be changed and not simply overwritten.

New documentation for incoming and outgoing arguments. Copied check from
library/ipaclient.py to do conflict checks if the check argument is set.

Documentation for domain, principal, keytab, ca_cert_file and kinit_attempts
has been added.

ca_certs_file has been renamed to ca_cert_file as it is used in
ipa-client-install.

The module is doing the important part of the code in ipa-client-install
to be able to use ipa-join on the client. get_ca_certs* from client.py are
used as a temporary solution.

IPA client imports are needed for discovery

The module is doing the same discovery that ipa-client-install is doing
internally. The results are saved into a structure named ipadiscovery for
the ansible module.

The discovery module is needed to be able to not depend on the definition
of the ipaservers group for example to get otp passwords, to be able to
join and to configure sssd and other services corretly.

More than one server could be specified

node and the credential cache is copied to the managed node

ipahost module is also using facts gathered from the server to find the
domain and realm.