On Thu, Jul 09, 2015 at 11:33:11AM +0200, Sumit Bose wrote:
Most probable because admin@EXAMPLE.TEST is the Kerberos principal of your user. If SSSD cannot find a matching user name and the name contains an '@' it tries to find a Kerberos principal which matches the full given name.
But realms are case sensitive, aren't they? So while it should work for admin@EXAMPLE.TEST, it should not for admin@example.test.