KNOX-298: add a topology template for using Active Directroy as authentication back end