Title: #420: WIP: Allow login to WebUI using Kerberos aliases/enterprise
LGTM and works as expected. Not ACKing only because it's marked as WIP.
See the full comment at
Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code