diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/generic/package.use b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/generic/package.use
index 38586b7c04..68f4209dbe 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/generic/package.use
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/amd64/generic/package.use
@@ -4,3 +4,4 @@ sys-firmware/intel-microcode vanilla
 
 # Enable gssapi only for amd64, to avoid build errors in arm64.
 net-dns/bind                 gssapi
+net-dns/bind-tools           gssapi
diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/package.use b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/package.use
index b07aa3e30f..8362479fd5 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/package.use
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/package.use
@@ -2,3 +2,4 @@
 
 # Disable gssapi for arm64 to avoid build errors
 net-dns/bind       -gssapi
+net-dns/bind-tools -gssapi
diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use
index 6f48f90522..88ca2ccb5f 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use
@@ -51,8 +51,8 @@ sys-fs/squashfs-tools xz lz4 lzma lzo zstd
 # make the kernel version discoverable via the traditional gentoo symlink
 sys-kernel/coreos-sources symlink
 
-# set build options for ssdp
-net-nds/openldap minimal sasl
+# set build options for sssd
+net-nds/openldap minimal sasl experimental
 sys-libs/glibc nscd
 
 # disable database build because otherwise it tries to generate a database in /etc
@@ -100,7 +100,8 @@ sys-apps/kmod lzma
 app-portage/portage-utils -qmanifest
 
 # Disable unnecessary regedit in samba to minimize the package size.
-net-fs/samba -regedit
+# winbind needed by sssd
+net-fs/samba -regedit winbind
 
 # Drop extra dependencies
 sys-libs/ldb -lmdb -python
diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/package.use b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/package.use
index 8d6be57ecc..4f49fda3f3 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/package.use
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/package.use
@@ -34,3 +34,4 @@ app-emulation/qemu -pin-upstream-blobs
 
 # Enable gssapi for SDK
 net-dns/bind                 gssapi
+net-dns/bind-tools           gssapi