1.10. Overriding Active Directory site autodiscovery with SSSD

1. SSSD performs an SRV query to find Domain Controllers (DCs) in the domain. SSSD reads the discovery domain from the dns_discovery_domain or the ad_domain options in the SSSD configuration file.
2. SSSD performs Connection-Less LDAP (CLDAP) pings to these DCs in 3 batches to avoid pinging too many DCs and avoid timeouts from unreachable DCs. If SSSD receives site and forest information during any of these batches, it skips the rest of the batches.
3. SSSD creates and saves a list of site-specific and backup servers.

Procedure

1. Open the /etc/sssd/sssd.conf file in a text editor.

2. Add the ad_site option to the [domain] section for your AD domain:

   [domain/ad.example.com]
   id_provider = ad
   ...
   ad_site = ExampleSite

3. Save and close the /etc/sssd/sssd.conf configuration file.

4. Restart the SSSD service to load the configuration changes:

   # systemctl restart sssd