right, was wondering if maybe something having to do with DNS or the krb5 config generated by IPA. Here's what I'm seeing:
[root@pyodbc ~]# env KRB5_TRACE=/dev/stdout python3.6 test.py
[28353] 1534350643.20557: Requesting tickets for MSSQLSvc/sqlserver2.ent2k12.domain.com:1433@
ENT2K12.DOMAIN.COM, referrals on
[28353] 1534350643.20558: Generated subkey for TGS request: aes256-cts/48E6
[28353] 1534350643.20559: etypes requested in TGS request: aes256-cts, aes128-cts, aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts
[28353] 1534350643.20561: Encoding request body and padata into FAST request
[28353] 1534350643.20565: Initiating TCP connection to stream
192.168.2.75:88[28353] 1534350643.20567: Received answer (1731 bytes) from stream
192.168.2.75:88[28353] 1534350643.20568: Terminating TCP connection to stream
192.168.2.75:88[28353] 1534350643.20569: Response was not from master KDC
[28353] 1534350643.20570: Decoding FAST response
[28353] 1534350643.20571: FAST reply key: aes256-cts/21CB
[28353] 1534350643.20573: TGS request result: 0/Success
[28353] 1534350643.20574: Received creds for desired service MSSQLSvc/sqlserver2.ent2k12.domain.com:1433@
ENT2K12.DOMAIN.COM[28353] 1534350643.20579: Generated subkey for TGS request: aes256-cts/88D1
[28353] 1534350643.20580: etypes requested in TGS request: rc4-hmac
[28353] 1534350643.20582: Encoding request body and padata into FAST request
[28353] 1534350643.20586: Initiating TCP connection to stream
192.168.2.75:88[28353] 1534350643.20588: Received answer (1672 bytes) from stream
192.168.2.75:88[28353] 1534350643.20589: Terminating TCP connection to stream
192.168.2.75:88[28353] 1534350643.20590: Response was not from master KDC
[28353] 1534350643.20591: Decoding FAST response
[28353] 1534350643.20592: FAST reply key: aes256-cts/64A9
[28353] 1534350643.20594: Got cred; 0/Success
[28353] 1534350643.20597: Negotiating for enctypes in authenticator: aes256-cts, aes128-cts, aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts
[28353] 1534350643.20616: Generated subkey for TGS request: aes256-cts/5F07
[28353] 1534350643.20617: etypes requested in TGS request: rc4-hmac
[28353] 1534350643.20619: Encoding request body and padata into FAST request
[28353] 1534350643.20623: Initiating TCP connection to stream
192.168.2.75:88[28353] 1534350643.20625: Received answer (1671 bytes) from stream
192.168.2.75:88[28353] 1534350643.20626: Terminating TCP connection to stream
192.168.2.75:88[28353] 1534350643.20627: Response was not from master KDC
[28353] 1534350643.20628: Decoding FAST response
[28353] 1534350643.20629: FAST reply key: aes256-cts/3BB5
[28353] 1534350643.20631: Got cred; 0/Success
[28353] 1534350643.20634: Negotiating for enctypes in authenticator: aes256-cts, aes128-cts, aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts
Traceback (most recent call last):
File "test.py", line 2, in <module>
pyodbc.Error: ('HY000', '[HY000] [unixODBC][Microsoft][ODBC Driver 13 for SQL Server]SSPI Provider: Message stream modified (851968) (SQLDriverConnect)')