We should enable site discovery like this by default in the sssd.conf for AD domains: https://fedoraproject.org/wiki/QA:Testcase_sssd_ad_dns_sites
I think that the default value for ad_servers is '_srv_'. So it's not necessary to change our behavior here. This already works as expected, because we don't add an ad_servers unless realmd was passed an explicit server. Jakub, could you correct me if I'm wrong here.
(In reply to comment #1) > I think that the default value for ad_servers is '_srv_'. So it's not > necessary to change our behavior here. This already works as expected, > because we don't add an ad_servers unless realmd was passed an explicit > server. > Correct, so if realmd doesn't set any value for ad_servers, then SSSD would start service discovery. > Jakub, could you correct me if I'm wrong here. Correct. There is also an option (ad_enable_dns_sites) that can be used to toggle the site discovery on/off, but it's currently set to "true" by default. I think that realmd is doing the right thing as it is.