<html><head></head><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:14px">I thought /etc/krb5.conf controls which kerberos server the clients talk to. <br><div dir="ltr" id="yui_3_16_0_ym19_1_1478620297900_7604"><div dir="ltr" id="yui_3_16_0_ym19_1_1478620297900_7661"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1478620297900_9408">As a test, I removed /etc/krb5.conf and rebooted the client. After reboot, I can still log in and "kinit user" . <br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1478620297900_12842">Removing /etc/krb5.keytab, however would stop user from logging in and sssd to start. <br></div><br></div></div></body></html>