[389-users] Syncing AD groups and multiple (samba) domains