[SSSD-users] SSSD, Group accounts, Kerberos, and prompt_principal