add variable sssd_show_only_enabled_users

ad-auth/templates/sssd.conf.j2

@@ -26,5 +26,6 @@ krb5_lifetime = 48h
 krb5_renewable_lifetime = 200h
 krb5_renew_interval = 30m
 ad_gpo_access_control = disabled
+{% if sssd_show_only_enabled_users|default(False) %}
 ldap_search_base = dc=fsmpi,dc=rwth-aachen,dc=de?subtree?(&(!(objectClass=computer))(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
-
+{% endif %}