Joining SSSD to domains in different forests

Issue

• SSSD trusted domain support currently only includes retrieving information from domains within the same Active Directory Resource Forest. That being said, SSSD can be configured to resolve users and groups from more than one AD forest by configuring a domain for each forest in the SSSD configuration file.

NOTE: If expecting to use only shortnames(user, instead of user@domain) then user/group objects will be resolved in order of the domain sections specified in sssd.conf