Get group membership for Windows users from secondary domain

[adiroiban]

The current cpde authenticates users for secondary domain

but then fails to get the controller for the secondary domain in order to get the groups.