[schoolornot]

I'd pay $10k/yr. out of pocket not to use FreeIPA again. It's no substitute for AD and when it breaks, it breaks hard.