[Freeipa-users] Group membership and AD trust problem