[Freeipa-users] shouldn't freeipa work by default?