[Freeipa-users] ad trust and external services