[Freeipa-users] How does FreeIPA resolve AD group names