In server mode, the discovery domain should be left unset in all cases as the DNS discovery is only driven by the AD domains. Currently if host name of the IPA server differs from the IPA domain itself, the installer would set the dns_discovery_domain option.
SSSD ticket https://fedorahosted.org/sssd/ticket/2079 works around the issue
Patch freeipa-mkosek-423-do-not-set-dns-discovery-domain-in-server-mode.patch sent for review
Metadata Update from @jhrozek:
- Issue assigned to mkosek
- Issue set to the milestone: FreeIPA 3.3.x - 2013/10 (bug fixing)
to comment on this ticket.