Trying to configure SLES12 SP3 for authentication against MS AD I find
two problems:
1) instead of installing the machine object into to default
CN=susi,CN=Computers,DC=example,DC=com AD admins asked me to use a
special OU for this task. With my admin account I am allowed to create
the object in this OU only. How to I achieve this with the YaST module
for enrollment. As far as I can tell the sssd.conf does me not give an
option for this.
2) YaST give an error "failed to find DC for domain" while the domain
controllers are defined in sssd.conf and are also visible from the client.

Any hints on one of those?