Running sys-auth/sssd-2.2.3 from its release with enviroment with RH FreeIPA server with net-fs/samba-4.11.11 (current stable). Everything works perfect on multiple servers ever sync initial release. Regarding >=net-fs/samba-4.12.* it may not work according to https://bugs.gentoo.org/711686. If limited to <samba-4.12, its fine to stabilize.
It seems that everything packages in Gentoo before 2.3.1 is a dumpster fire. Let's target 2.3.1.
Sanity check failed: > sys-auth/sssd-2.3.1-r2 > bdepend amd64 stable profile default/linux/amd64/17.0 (39 total) > sys-libs/pam_wrapper > bdepend amd64 dev profile default/linux/amd64/17.0/no-multilib/prefix/kernel-3.2+ (2 total) > sys-libs/pam_wrapper
All sanity-check issues have been resolved
Both stabilized.