Hi,

Is it possible to limit our ipa servers to only communicate with domain controllers within one particular active directory site?

I have tried to add:

dns_discovery_domain = NameOfADSite in /etc/sssd/sssd.conf

and also by specifying each domain controller with these options:

ad_server = ad_backup_server =

without any success.

Best,

Vegard Torvund