On Thu, 2012-03-01 at 15:23 +0100, Ondrej Valousek wrote:
There is nothing wrong with that, the only thing is, that unlike
Samba
& SSSD, Centrify does refresh principals in /etc/krb5.keytab creating
multiple principals in keytab that differ only by the KVNO number.
FYI:
https://fedorahosted.org/sssd/ticket/1041 is tracking this
(scheduled for SSSD 1.11 in 9 months).