I am working to integrate our Linux systems into Active Directory - so they get AD Kerberos tickets, use the same passwords etc. Many things are working, but now I'm running into an issue where many programs that are Linux derived such as puppet, qemu, etc have a user account named, for example 'qemu' and a group named 'qemu' but AD won't let me create the equivalent user/group pair as they are named the same. This sort of setup is apparently common with Linux programs, and it's not obvious that we can change it without a lot of re-configuration.
What are other admins doing in this situation? Is there a way to enable users and groups having the same name, at least for LDAP lookups from Linux?