[Freeipa-users] Re: trust AD - kerberos - how it works?