Kerberos Active Directory synchronization plugin