On Tue, Oct 04, 2016 at 12:23:38PM +0100, John Beranek wrote:
Hmm, though it could be my test setup, which seems to fall off the
domain commonly (perhaps after an sss_cache -E) with errors like:
Oct 4 12:21:57 how-centos6-tpl [sssd[ldap_child[15261]]]: Failed to
initialize credentials using keytab [MEMORY:/etc/krb5.keytab]:
Preauthentication failed. Unable to create GSSAPI-encrypted LDAP
connection.
I wonder if the domain rotates the keytab? But 6.8 should already
support this provided you install adcli on the machine..