In some environments, the call to change trust password (which regenerates
the local kerberos keytab) will fail unless workgroup information is passed
to the 'net' call. In general, a failure to change the trust password
at this stage can be ignored relatively safely. It may have temporary
impact on users with kerberized NFS until the next automatic password change.
So we will catch the error, log it, and continue.

LDAP module was failing to properly validate credenitals until
after they were written to the config.