6569f35
Set the "KerberosAuthentication" option in sshd_config to "no" instead of "yes". Setting it to "yes" causes sshd to handle kinits itself, bypassing SSSD. ticket 2689