In server mode, the discovery domain should be left unset in all cases as the DNS discovery is only driven by the AD domains. Currently if host name of the IPA server differs from the IPA domain itself, the installer would set the dns_discovery_domain option.
SSSD ticket https://fedorahosted.org/sssd/ticket/2079 works around the issue
attachment freeipa-mkosek-423-do-not-set-dns-discovery-domain-in-server-mode.patch
Patch freeipa-mkosek-423-do-not-set-dns-discovery-domain-in-server-mode.patch sent for review
master: 7d2d1cb[[BR]] ipa-3-3: 38592f7
Metadata Update from @jhrozek: - Issue assigned to mkosek - Issue set to the milestone: FreeIPA 3.3.x - 2013/10 (bug fixing)
Login to comment on this ticket.