10.9: add AD auth