[SSSD-users] AD failover and Kerberos