[Sssd-maintainers] [Bug 2351336] New: /etc/krb5.conf.d/enable_sssd_conf_dir is mistakenly in package sssd-krb5, not in sssd-krb5-common

https://bugzilla.redhat.com/show_bug.cgi?id=2351336

Bug ID: 2351336
           Summary: /etc/krb5.conf.d/enable_sssd_conf_dir is mistakenly in
                    package sssd-krb5, not in sssd-krb5-common
           Product: Fedora
           Version: 41
          Hardware: x86_64
                OS: Linux
            Status: NEW
         Component: sssd
          Severity: medium
          Assignee: [e-mail]
          Reporter: [e-mail]
        QA Contact: [e-mail]
                CC: [e-mail], [e-mail],
                    [e-mail], [e-mail],
                    [e-mail], [e-mail],
                    [e-mail]
  Target Milestone: ---
    Classification: Fedora

I have used realmd to join a host to an Active Directory domain. Realmd uses
sssd-ad for this, which pulls in sssd-krb5-common but _not_ sssd-krb5.

Unfortunately, sssd-krb5-common does not install the snippet
/etc/krb5.conf.d/enable_sssd_conf_dir. This results in SSH refusing
gssapi-with-mic authentication.

When I additionally install the sssd-krb5 package (which includes the snippet),
or create the snippet manually, SSH logins use my SSSD config and GSSAPI
authentication goes through.

Reproducible: Always

Steps to Reproduce:
1. Install realmd on a host
2. Join host to Active Directory domain
3. Enable SSH daemon
4. ssh -l user@realm -o preferredauthentications=gssapi-with-mic host
Actual Results:  
Authentication is denied, no SSH session opened

Expected Results:  
Authentication goes through, SSH session is opened