password reset does not work with IPA; disable it if external_auth is enabled