Add libsss_sudo to task-auth-freeipa.

Fix an error message (the password is expired).

Avoid dependency to gpupdate-setup due gpupdate mechanism is not mandatory.

Enable Winbind with SSSD idmap for Active Directory secure channel.
Synchronize SSSD and Winbind configuaration during join to AD.

Add requires samba-winbind-clients to task-auth-ad-sssd metapackage

Improve gpupdate enable/disable process

Add default libnss-role roles for users, powerusers and localadmins in separated
roles-common - common files for alterator-roles (not implemented yet).
user-groups and admin-groups saved temporary for compatibility.
Create aditional groups during alterator-roles-common install:

Add ad_gpo_access_control default as permissive for sssd.conf

Add ad_gpo_ignore_unreadable and cache_credentials defaults for sssd.conf

Add changelog from p9 allows copy from sisyphus to p9.

Place dns source immediately after files instead of disabling avahi-daemon service (ALT #37082).

Place dns source immediately after files instead of disabling avahi-daemon service (ALT #37082).

Disable avahi-daemon if login to .local domain is requested (ALT #37082).

join_ipa_domain(): adapt dm and delete obsoleted fix for nsswitch.conf.

Fix hide user list for new version of lightdm.
Do not remove local DNS from resolvconf.

Hide user list in Lightdm for domain login.