It looks like cli_realm is not passed into the sssd configuration for when the Kerberos realm is different from the IPA domain the SSSD ends up misconfigured.
I'm unable to reproduce this. Can you provide more details on how sssd is misconfigured and/or the command-line you used with ipa-client-install?
https://bugzilla.redhat.com/show_bug.cgi?id=675352
Need to set krb5_realm and ipa_domain in the ipa section.
attachment freeipa-rcrit-735-sssd.patch
master: e7ed403
Metadata Update from @dpal: - Issue assigned to rcritten - Issue set to the milestone: FreeIPA 2.0.2 RC2 (bug fixing)
Login to comment on this ticket.