provision: fix the 'dnsdomain' for the local sam of a domain member