[Freeipa-users] Problem with AD authentication after updating to 7.2 OS server

[Sumit Bose]

On Fri, Nov 27, 2015 at 05:35:42PM +0100, Morgan Marodin wrote:
> Hi Sumit.
> 
> I don't know why, but now kerberos ticket authentication is working on 6.7
> clients.
> On 7.2 clients now password authetications with Active Directory
> credentials is working ... but not with kerberos ticket.

This is most likely due to some issues while mapping the Kerberos
principal to the local user name.

Do you have a 'includedir /var/lib/sss/pubconf/krb5.include.d/' line at
the beginning of you krb5.conf file? Does
/var/lib/sss/pubconf/krb5.include.d/localauth_plugin exists?

bye,
Sumit