Quoting Lukas Slebodnik <lslebodn(a)redhat.com> on Tue, Dec 13 10:36:
Maybe it might be better to provide content of keytab "klist -kt"
IIRC older version of sssd did not pick up right principal "SOMETHING$"
And it was fixed in newver version of sssd.
root@phys-adtest:~# klist -kt
Keytab name: FILE:/etc/krb5.keytab
KVNO Timestamp Principal
---- ------------------- ------------------------------------------------------
3 10/24/2016 10:00:40 PHYS-ADTEST$(a)TOU.T3.UCDAVIS.EDU
3 10/24/2016 10:00:40 PHYS-ADTEST$(a)TOU.T3.UCDAVIS.EDU
3 10/24/2016 10:00:40 PHYS-ADTEST$(a)TOU.T3.UCDAVIS.EDU
3 10/24/2016 10:00:40 PHYS-ADTEST$(a)TOU.T3.UCDAVIS.EDU
3 10/24/2016 10:00:40 PHYS-ADTEST$(a)TOU.T3.UCDAVIS.EDU
3 10/24/2016 10:00:40 PHYS-ADTEST$(a)TOU.T3.UCDAVIS.EDU
3 10/24/2016 10:00:40 host/PHYS-ADTEST(a)TOU.T3.UCDAVIS.EDU
3 10/24/2016 10:00:40 host/PHYS-ADTEST(a)TOU.T3.UCDAVIS.EDU
3 10/24/2016 10:00:40 host/PHYS-ADTEST(a)TOU.T3.UCDAVIS.EDU
3 10/24/2016 10:00:40 host/PHYS-ADTEST(a)TOU.T3.UCDAVIS.EDU
3 10/24/2016 10:00:40 host/PHYS-ADTEST(a)TOU.T3.UCDAVIS.EDU
3 10/24/2016 10:00:40 host/PHYS-ADTEST(a)TOU.T3.UCDAVIS.EDU
3 10/24/2016 10:00:40 host/phys-adtest(a)TOU.T3.UCDAVIS.EDU
3 10/24/2016 10:00:40 host/phys-adtest(a)TOU.T3.UCDAVIS.EDU
3 10/24/2016 10:00:40 host/phys-adtest(a)TOU.T3.UCDAVIS.EDU
3 10/24/2016 10:00:40 host/phys-adtest(a)TOU.T3.UCDAVIS.EDU
3 10/24/2016 10:00:40 host/phys-adtest(a)TOU.T3.UCDAVIS.EDU
3 10/24/2016 10:00:40 host/phys-adtest(a)TOU.T3.UCDAVIS.EDU
3 10/24/2016 10:00:40 RestrictedKrbHost/PHYS-ADTEST(a)TOU.T3.UCDAVIS.EDU
3 10/24/2016 10:00:40 RestrictedKrbHost/PHYS-ADTEST(a)TOU.T3.UCDAVIS.EDU
3 10/24/2016 10:00:40 RestrictedKrbHost/PHYS-ADTEST(a)TOU.T3.UCDAVIS.EDU
3 10/24/2016 10:00:40 RestrictedKrbHost/PHYS-ADTEST(a)TOU.T3.UCDAVIS.EDU
3 10/24/2016 10:00:40 RestrictedKrbHost/PHYS-ADTEST(a)TOU.T3.UCDAVIS.EDU
3 10/24/2016 10:00:40 RestrictedKrbHost/PHYS-ADTEST(a)TOU.T3.UCDAVIS.EDU
3 10/24/2016 10:00:40 RestrictedKrbHost/phys-adtest(a)TOU.T3.UCDAVIS.EDU
3 10/24/2016 10:00:40 RestrictedKrbHost/phys-adtest(a)TOU.T3.UCDAVIS.EDU
3 10/24/2016 10:00:40 RestrictedKrbHost/phys-adtest(a)TOU.T3.UCDAVIS.EDU
3 10/24/2016 10:00:40 RestrictedKrbHost/phys-adtest(a)TOU.T3.UCDAVIS.EDU
3 10/24/2016 10:00:40 RestrictedKrbHost/phys-adtest(a)TOU.T3.UCDAVIS.EDU
3 10/24/2016 10:00:40 RestrictedKrbHost/phys-adtest(a)TOU.T3.UCDAVIS.EDU
4 11/23/2016 12:54:18 PHYS-ADTEST$(a)TOU.T3.UCDAVIS.EDU
4 11/23/2016 12:54:18 PHYS-ADTEST$(a)TOU.T3.UCDAVIS.EDU
4 11/23/2016 12:54:18 PHYS-ADTEST$(a)TOU.T3.UCDAVIS.EDU
4 11/23/2016 12:54:18 PHYS-ADTEST$(a)TOU.T3.UCDAVIS.EDU
4 11/23/2016 12:54:18 PHYS-ADTEST$(a)TOU.T3.UCDAVIS.EDU
4 11/23/2016 12:54:18 host/PHYS-ADTEST(a)TOU.T3.UCDAVIS.EDU
4 11/23/2016 12:54:18 host/PHYS-ADTEST(a)TOU.T3.UCDAVIS.EDU
4 11/23/2016 12:54:18 host/PHYS-ADTEST(a)TOU.T3.UCDAVIS.EDU
4 11/23/2016 12:54:18 host/PHYS-ADTEST(a)TOU.T3.UCDAVIS.EDU
4 11/23/2016 12:54:18 host/PHYS-ADTEST(a)TOU.T3.UCDAVIS.EDU
4 11/23/2016 12:54:18 host/phys-adtest(a)TOU.T3.UCDAVIS.EDU
4 11/23/2016 12:54:18 host/phys-adtest(a)TOU.T3.UCDAVIS.EDU
4 11/23/2016 12:54:18 host/phys-adtest(a)TOU.T3.UCDAVIS.EDU
4 11/23/2016 12:54:18 host/phys-adtest(a)TOU.T3.UCDAVIS.EDU
4 11/23/2016 12:54:18 host/phys-adtest(a)TOU.T3.UCDAVIS.EDU
4 11/23/2016 12:54:18 RestrictedKrbHost/PHYS-ADTEST(a)TOU.T3.UCDAVIS.EDU
4 11/23/2016 12:54:18 RestrictedKrbHost/PHYS-ADTEST(a)TOU.T3.UCDAVIS.EDU
4 11/23/2016 12:54:18 RestrictedKrbHost/PHYS-ADTEST(a)TOU.T3.UCDAVIS.EDU
4 11/23/2016 12:54:18 RestrictedKrbHost/PHYS-ADTEST(a)TOU.T3.UCDAVIS.EDU
4 11/23/2016 12:54:18 RestrictedKrbHost/PHYS-ADTEST(a)TOU.T3.UCDAVIS.EDU
4 11/23/2016 12:54:18 RestrictedKrbHost/phys-adtest(a)TOU.T3.UCDAVIS.EDU
4 11/23/2016 12:54:18 RestrictedKrbHost/phys-adtest(a)TOU.T3.UCDAVIS.EDU
4 11/23/2016 12:54:18 RestrictedKrbHost/phys-adtest(a)TOU.T3.UCDAVIS.EDU
4 11/23/2016 12:54:18 RestrictedKrbHost/phys-adtest(a)TOU.T3.UCDAVIS.EDU
4 11/23/2016 12:54:18 RestrictedKrbHost/phys-adtest(a)TOU.T3.UCDAVIS.EDU
--
Omen Wild
Systems Administrator
Metro Cluster