[Freeipa-users] Limit LDAP communication to one Active Directory site

[Torvund, Vegard]

Hi,

Is it possible to limit our ipa servers to only communicate with domain controllers within
one particular active directory site?

I have tried to add:

dns_discovery_domain = NameOfADSite
in /etc/sssd/sssd.conf

and also by specifying each domain controller with these options:

ad_server =
ad_backup_server =

without any success.

Best,

Vegard Torvund