On Thu, Jul 09, 2015 at 11:33:11AM +0200, Sumit Bose wrote:
Most probable because admin(a)EXAMPLE.TEST is the Kerberos principal of
your user. If SSSD cannot find a matching user name and the name
contains an '@' it tries to find a Kerberos principal which matches the
full given name.
But realms are case sensitive, aren't they? So while it should work
for admin(a)EXAMPLE.TEST, it should not for admin(a)example.test.
Senior Principal Software Engineer, Identity Management Engineering, Red Hat