Excessive logging to sssd_nss and sssd_be in multi-domain AD forest

What were you trying to do that didn't work?

After upgrading to RHEL 8.9, SSSD produces thousands of "Unknown domain" messages a minute in the sssd_nss.log & sssd_be.log files. Setting 'debug_level = 0' does not stop the logging.

The host has a direct AD integration in a multi-domain forest. All of the unknown domains in the logs are excluded from the 'ad_enabled_domains' setting in sssd.conf

Please provide the package NVR for which bug is seen:

sssd-2.9.1-4.el8_9.x86_64

sssd-ad-2.9.1-4.el8_9.x86_64
sssd-client-2.9.1-4.el8_9.x86_64
sssd-common-2.9.1-4.el8_9.x86_64
sssd-common-pac-2.9.1-4.el8_9.x86_64
sssd-dbus-2.9.1-4.el8_9.x86_64
sssd-ipa-2.9.1-4.el8_9.x86_64
sssd-kcm-2.9.1-4.el8_9.x86_64
sssd-krb5-2.9.1-4.el8_9.x86_64
sssd-krb5-common-2.9.1-4.el8_9.x86_64
sssd-ldap-2.9.1-4.el8_9.x86_64
sssd-nfs-idmap-2.9.1-4.el8_9.x86_64
sssd-proxy-2.9.1-4.el8_9.x86_64
sssd-tools-2.9.1-4.el8_9.x86_64

How reproducible:

Steps to reproduce

Expected results

Actual results