6321c5b
Set the "KerberosAuthentication" option in sshd_config to "no" instead of "yes". Setting it to "yes" causes sshd to handle kinits itself, bypassing SSSD. ticket 2689