Hi,
in some cases when an IPA-AD trust client is offline, the libkrb5
functions in krb5_child would error out with KRB5_REALM_UNKNOWN, because
the client is completely autoconfigured.
I think we should handle this error code as ERR_NETWORK_IO internally
and I hope this change would fix bugs like
https://fedorahosted.org/sssd/ticket/2866 but I haven't heard from the
reporter yet.