[Freeipa-users] Re: shortname in trusted ad domain