more freeipa fixes