1. Mapping local users to Kerberos principals with SSSD

  2. Kerberos authenticated queries to Active Directory