SSSD reports Realm not local to KDC

Issue

• We changed the end of our hostname of our SSSD client and now users cannot authenticate.
• Our machine lives in a different DNS Domain than our LDAP.
• SSSD is searching the wrong DNS domain for Kerberos servers.
• The client lives in a DNS Domain that we do not want it to use for authentication.