Having had to use it to connect authentication to LDAP via sssd, I’m not sure I would describe it as nicely as you do. To put it bluntly, my personal opinion i

Having had to use it to connect authentication to LDAP via sssd, I’m not sure I would describe it as nicely as you do. To put it bluntly, my personal opinion is that it is a massive piece of shit. It makes even simple things feel complicated for no reason whatsoever and is so brittle. The whole thing is a huge design failure.