On Thu, Jul 09, 2015 at 11:33:11AM +0200, Sumit Bose wrote:
Most probable because admin(a)EXAMPLE.TEST is the Kerberos principal of
your user. If SSSD cannot find a matching user name and the name
contains an '@' it tries to find a Kerberos principal which matches the
full given name.
But realms are case sensitive, aren't they? So while it should work
for admin(a)EXAMPLE.TEST, it should not for admin(a)example.test.
--
Jan Pazdziora
Senior Principal Software Engineer, Identity Management Engineering, Red Hat