[Freeipa-users] cross realm trust - without win AD credentials ?