[Freeipa-users] AD Trust question