Ondrej Valousek wrote:
I had the same problem and instead of had-coding our local AD server
(which is ugly) I used dns_discovery_domain in form of:
<your site name>._sites.<ad realm>
This way you ensure sssd is always using local AD controller to your site.
So if my AD was: test-ad-01.example.com
My conf file would look like:
dns_discovery_domain = test-ad-01._sites.example.com