On Fri, 2012-08-03 at 09:59 +0200, Ondrej Valousek wrote:
Looks like _kpasswd SRV entry was missing in my DNS.
Strange that pam_krb5 was authenticating happily without this...
No, it IS a bug we've identified in SSSD:
https://fedorahosted.org/sssd/ticket/1452
We just wanted to confirm that you were hitting the same issue.