- new very much simplified GUI
    - use SSSD instead of legacy ldap/krb5 if the configuration is supported
    - drop krb4 config file write (#569612)
    - handle exception when running with insufficient priviledges (#572534)
    - support RFC2307bis LDAP schema