[Freeipa-users] Re: AD trust and external services