[Freeipa-users] Can kerberos SSSD provider be used against IPA

[Jakub Hrozek]

On Fri, Mar 03, 2017 at 07:10:40PM -0500, William Muriithi wrote:
> Hello,
> 
> I just came across this document.
> 
> https://www.susecon.com/doc/2015/sessions/TUT19343.pdf
> 
> If you look at page 8, that diagram imply that kerberos provider can
> only be used against active directory back end.

The AD and IPA authentication providers are more or less wrappers around
the Kerberos provider with some extra options such as the support for
enterprise principals.