1. Mapping local users to Kerberos principals with SSSD