Set the "KerberosAuthentication" option in sshd_config to "no" instead of "yes".

Setting it to "yes" causes sshd to handle kinits itself, bypassing SSSD.

ticket 2689
This commit is contained in:
Jan Cholasta 2012-04-30 11:58:55 -04:00 committed by Rob Crittenden
parent caf36e1f24
commit 6569f355b6

View File

@ -878,7 +878,7 @@ def configure_ssh(fstore, ssh_dir, options):
fstore.backup_file(sshd_config)
changes = {
'KerberosAuthentication': 'yes',
'KerberosAuthentication': 'no',
'GSSAPIAuthentication': 'yes',
'UsePAM': 'yes',
}