sssd uses the ldapDomain rather than the ansible_domain to template sssd.conf. Hopefully machines will work with sssd even with domain resolution (hostname -d)