I haven't been able to find much useful information on how sssd (if at all) handles
child domains in Active Directory.
If you join an AD domain, presumably you can authenticate any users in the children
domains, but what happens when you do "getent" do you expect to see users of the
child domain reflected in the getent (since you are joined to the parent)? Do you expect
to always be able to lookup users SIDs and UIDs from the children of the domains you
joined? What about the parents?