[Freeipa-users] Migration AD trust and group