From 6321c5ba87ff916bfff7fa15d20cb6d1a18f20f0 Mon Sep 17 00:00:00 2001
From: Jan Cholasta <jcholast@redhat.com>
Date: Apr 29 2012 23:45:29 +0000
Subject: Set the "KerberosAuthentication" option in sshd_config to "no" instead of "yes".


Setting it to "yes" causes sshd to handle kinits itself, bypassing SSSD.

ticket 2689

---

diff --git a/ipa-client/ipa-install/ipa-client-install b/ipa-client/ipa-install/ipa-client-install
index 563e9c4..7133cce 100755
--- a/ipa-client/ipa-install/ipa-client-install
+++ b/ipa-client/ipa-install/ipa-client-install
@@ -878,7 +878,7 @@ def configure_ssh(fstore, ssh_dir, options):
     fstore.backup_file(sshd_config)
 
     changes = {
-        'KerberosAuthentication': 'yes',
+        'KerberosAuthentication': 'no',
         'GSSAPIAuthentication': 'yes',
         'UsePAM': 'yes',
     }