diff --git a/sys-auth/sssd/sssd-2.2.3.ebuild b/sys-auth/sssd/sssd-2.2.3.ebuild
index e89158a..4762eea 100644
--- a/sys-auth/sssd/sssd-2.2.3.ebuild
+++ b/sys-auth/sssd/sssd-2.2.3.ebuild
@@ -3,7 +3,9 @@
 
 EAPI=7
 
-inherit autotools flag-o-matic linux-info multilib-minimal pam systemd toolchain-funcs
+PYTHON_COMPAT=( python3_{6,7,8} )
+
+inherit autotools flag-o-matic linux-info multilib-minimal pam python-r1 systemd toolchain-funcs
 
 DESCRIPTION="System Security Services Daemon provides access to identity and authentication"
 HOMEPAGE="https://pagure.io/SSSD/sssd"
@@ -12,7 +14,8 @@ KEYWORDS="~amd64 ~arm ~arm64 ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~spar
 
 LICENSE="GPL-3"
 SLOT="0"
-IUSE="acl autofs +locator +netlink nfsv4 nls +manpages samba selinux sudo ssh test"
+IUSE="acl autofs +locator +netlink nfsv4 nls +manpages python samba selinux sudo ssh test"
+RESTRICT="!test? ( test )"
 
 COMMON_DEP="
 	>=sys-libs/pam-0-r1[${MULTILIB_USEDEP}]
@@ -49,6 +52,7 @@ COMMON_DEP="
 	virtual/libintl
 	netlink? ( dev-libs/libnl:3 )
 	samba? ( >=net-fs/samba-4.10.2[winbind] )
+	( ${PYTHON_DEPS} )
 	"
 
 RDEPEND="${COMMON_DEP}
@@ -84,6 +88,9 @@ src_prepare() {
 	sed -i 's:#!/sbin/runscript:#!/sbin/openrc-run:' \
 		"${S}"/src/sysv/gentoo/sssd.in || die "sed sssd.in"
 
+	sed -i 's:PYTHON_EXEC=$PYTHON2:PYTHON_EXEC=$PYTHON3:' \
+		"${S}"/configure.ac || die "sed configure.ac"
+
 	default
 	eautoreconf
 	multilib_copy_sources
@@ -102,6 +109,14 @@ multilib_src_configure() {
 	#Work around linker dependency problem.
 	append-ldflags "-Wl,--allow-shlib-undefined"
 
+	local python3_configure=--without-python3-bindings
+	if use python; then
+		python_configure() {
+			python3_configure=--with-python3-bindings
+		}
+		python_foreach_impl python_configure
+	fi
+
 	myconf+=(
 		--localstatedir="${EPREFIX}"/var
 		--enable-nsslibdir="${EPREFIX}"/$(get_libdir)
@@ -132,7 +147,7 @@ multilib_src_configure() {
 		--with-crypto="nss"
 		--with-initscript="sysv"
 		--without-python2-bindings
-		--without-python3-bindings
+		${python3_configure}
 
 		KRB5_CONFIG=/usr/bin/${CHOST}-krb5-config
 	)