[Freeipa-users] Re: Mapping freeipa's groups over AD