(Thu May 9 11:54:53 2013) [sssd[be[default]]] [fo_new_service] (0x0400): Creating new service 'KERBEROS'
(Thu May 9 11:54:53 2013) [sssd[be[default]]] [krb5_service_init] (0x0100): No primary servers defined, using service discovery
(Thu May 9 11:54:53 2013) [sssd[be[default]]] [fo_add_srv_server] (0x0400): Adding new SRV server to service 'KERBEROS' using 'udp'.
(Thu May 9 11:54:53 2013) [sssd[be[default]]] [fo_add_srv_server] (0x0400): Adding new SRV server to service 'KERBEROS' using 'tcp'.
(Thu May 9 11:54:53 2013) [sssd[be[default]]] [krb5_servers_init] (0x0400): Added service lookup
.... And then later when I attempt to lookup user information (id fred). It successfully finds the services:
(Thu May 9 11:57:03 2013) [sssd[be[default]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'LDAP'
(Thu May 9 11:57:03 2013) [sssd[be[default]]] [get_port_status] (0x1000): Port status of port 0 for server '(no name)' is 'neutral'
(Thu May 9 11:57:03 2013) [sssd[be[default]]] [fo_resolve_service_activate_timeout] (0x2000): Resolve timeout set to 10 seconds
(Thu May 9 11:57:03 2013) [sssd[be[default]]] [resolve_srv_send] (0x0200): The status of SRV lookup is neutral
(Thu May 9 11:57:03 2013) [sssd[be[default]]] [resolve_srv_send] (0x0400): SRV resolution of service 'LDAP'. dns_discovery_domain not specified. Need to look it up.
(Thu May 9 11:57:03 2013) [sssd[be[default]]] [resolve_get_domain_send] (0x1000): Host name is: ldap.my-domain.com
(Thu May 9 11:57:03 2013) [sssd[be[default]]] [resolv_is_address] (0x4000): [ldap.my-domain.com] does not look like an IP address
(Thu May 9 11:57:03 2013) [sssd[be[default]]] [resolv_gethostbyname_step] (0x2000): Querying files
(Thu May 9 11:57:03 2013) [sssd[be[default]]] [resolv_gethostbyname_files_send] (0x0100): Trying to resolve A record of 'ldap.my-domain.com' in files
(Thu May 9 11:57:03 2013) [sssd[be[default]]] [resolv_gethostbyname_step] (0x2000): Querying files
(Thu May 9 11:57:03 2013) [sssd[be[default]]] [resolv_gethostbyname_files_send] (0x0100): Trying to resolve AAAA record of 'ldap.my-domain.com' in files
(Thu May 9 11:57:03 2013) [sssd[be[default]]] [resolv_gethostbyname_next] (0x0200): No more address families to retry
(Thu May 9 11:57:03 2013) [sssd[be[default]]] [resolv_gethostbyname_step] (0x2000): Querying DNS
(Thu May 9 11:57:03 2013) [sssd[be[default]]] [resolv_gethostbyname_dns_query] (0x0100): Trying to resolve A record of 'ldap.my-domain.com' in DNS
(Thu May 9 11:57:03 2013) [sssd[be[default]]] [schedule_request_timeout] (0x2000): Scheduling a timeout of 5 seconds
(Thu May 9 11:57:03 2013) [sssd[be[default]]] [schedule_timeout_watcher] (0x2000): Scheduling DNS timeout watcher
(Thu May 9 11:57:03 2013) [sssd[be[default]]] [unschedule_timeout_watcher] (0x4000): Unscheduling DNS timeout watcher
(Thu May 9 11:57:03 2013) [sssd[be[default]]] [resolv_gethostbyname_dns_parse] (0x1000): Parsing an A reply
(Thu May 9 11:57:03 2013) [sssd[be[default]]] [request_watch_destructor] (0x0400): Deleting request watch
And Kerberos DNS discovery works...
(Thu May 9 12:04:30 2013) [sssd[be[default]]] [resolve_srv_cont] (0x0100): Searching for servers via SRV query '_KERBEROS._udp.my-domain.com'
(Thu May 9 12:04:30 2013) [sssd[be[default]]] [resolv_getsrv_send] (0x0100): Trying to resolve SRV record of '_KERBEROS._udp.my-domain.com'
(Thu May 9 12:04:30 2013) [sssd[be[default]]] [schedule_request_timeout] (0x2000): Scheduling a timeout of 5 seconds
(Thu May 9 12:04:30 2013) [sssd[be[default]]] [schedule_timeout_watcher] (0x2000): Scheduling DNS timeout watcher
(Thu May 9 12:04:30 2013) [sssd[be[default]]] [unschedule_timeout_watcher] (0x4000): Unscheduling DNS timeout watcher
(Thu May 9 12:04:30 2013) [sssd[be[default]]] [request_watch_destructor] (0x0400): Deleting request watch
(Thu May 9 12:04:30 2013) [sssd[be[default]]] [resolve_srv_done] (0x0400): Inserted server 'kerberos.my-domain.com:88' for service KERBEROS
(Thu May 9 12:04:30 2013) [sssd[be[default]]] [set_srv_data_status] (0x0100): Marking SRV lookup of service 'KERBEROS' as 'resolved'
(Thu May 9 12:04:30 2013) [sssd[be[default]]] [get_server_status] (0x1000): Status of server 'kerberos.my-domain.com' is 'name not resolved'
(Thu May 9 12:04:30 2013) [sssd[be[default]]] [resolv_is_address] (0x4000): [kerberos.my-domain.com] does not look like an IP address
(Thu May 9 12:04:30 2013) [sssd[be[default]]] [resolv_gethostbyname_step] (0x2000): Querying files
(Thu May 9 12:04:30 2013) [sssd[be[default]]] [resolv_gethostbyname_files_send] (0x0100): Trying to resolve A record of 'kerberos.my-domain.com' in files
(Thu May 9 12:04:30 2013) [sssd[be[default]]] [set_server_common_status] (0x0100): Marking server 'kerberos.my-domain.com' as 'resolving name'
(Thu May 9 12:04:30 2013) [sssd[be[default]]] [resolv_gethostbyname_step] (0x2000): Querying files
(Thu May 9 12:04:30 2013) [sssd[be[default]]] [resolv_gethostbyname_files_send] (0x0100): Trying to resolve AAAA record of 'kerberos.my-domain.com' in files
(Thu May 9 12:04:30 2013) [sssd[be[default]]] [resolv_gethostbyname_next] (0x0200): No more address families to retry
(Thu May 9 12:04:30 2013) [sssd[be[default]]] [resolv_gethostbyname_step] (0x2000): Querying DNS
(Thu May 9 12:04:30 2013) [sssd[be[default]]] [resolv_gethostbyname_dns_query] (0x0100): Trying to resolve A record of 'kerberos.my-domain.com' in DNS
(Thu May 9 12:04:30 2013) [sssd[be[default]]] [sdap_uri_callback] (0x0400): Constructed uri 'ldap://ldap.my-domain.com:636'
(Thu May 9 12:04:30 2013) [sssd[be[default]]] [sss_ldap_init_send] (0x4000): Using file descriptor [22] for LDAP connection.
(Thu May 9 12:04:30 2013) [sssd[be[default]]] [sss_ldap_init_send] (0x0400): Setting 6 seconds timeout for connecting
(Thu May 9 12:04:30 2013) [sssd[be[default]]] [sdap_ldap_connect_callback_add] (0x1000): New LDAP connection to [ldap://ldap.my-domain.com:636/??base] with fd [22].
(Thu May 9 12:04:30 2013) [sssd[be[default]]] [sdap_get_rootdse_send] (0x4000): Getting rootdse