Red Hat Bugzilla – Bug 1461899
Loading enterprise principals doesn't work with a primed cache
Last modified: 2018-01-30 07:56 EST
This bug is created as a clone of upstream ticket:
The IPA subdomains code only loaded the naming suffixes when the subdomains changed. As effect, just restarting sssd breaks logins with enterprise principals.
The workaround is to remove the cache.
Created attachment 1388387 [details]
Console output and krb5_child log
Now, "enterprise principal [true]", with UPN being used.
Attaching krb5_child log and Console output