[Freeipa-users] AD trust and external services