Bug 966557

This bug is created as a clone of upstream ticket:
https://fedorahosted.org/sssd/ticket/1931

Ticket was cloned from Red Hat Bugzilla (product ''Fedora''): [https://bugzilla.redhat.com/show_bug.cgi?id=963818 Bug 963818]

{{{
Description of problem:
When 2 domains are configured in sssd only login as remote user works only for
the 2nd one.
This is doe to krb5_use_enterprise_principal, because when it is set to False
the login starts to work.

Version-Release number of selected component (if applicable):
sssd-1.10.0-5.fc19.beta1

How reproducible:
always

Steps to Reproduce:

# cat /etc/sssd/sssd.conf

[sssd]
domains = ad.baseos.qe, security.baseos.qe
config_file_version = 2
services = nss, pam

[nss]
default_shell = /bin/bash

[domain/ad.baseos.qe]
ad_domain = ad.baseos.qe
krb5_realm = AD.BASEOS.QE
cache_credentials = True
id_provider = ad
krb5_store_password_if_offline = True
ldap_id_mapping = True
use_fully_qualified_names = True
fallback_homedir = /home/%d/%u
access_provider = ad

[domain/security.baseos.qe]
ad_domain = security.baseos.qe
krb5_realm = SECURITY.BASEOS.QE
cache_credentials = True
id_provider = ad
krb5_store_password_if_offline = True
ldap_id_mapping = True
use_fully_qualified_names = True
fallback_homedir = /home/%d/%u
access_provider = ad

# getent passwd Bender.qe
bender.qe:*:1197601112:1197600513:Bender:/home/ad.baseos.qe/bender:/b
in/bash
# getent passwd Bender.qe
bender.qe:*:89801133:89800513:Bender:/home/security.baseos.qe/b
ender:/bin/bash

$ ssh Bender.qe.100.19
Bender.qe.100.19's password:
Last login: Thu May 16 17:23:59 2013 from 192.168.100.1
[bender.qe@pkis ~]$ exit
logout
Connection to 192.168.100.19 closed.
$
$ ssh Bender.qe.100.19
Bender.qe.100.19's password:
Permission denied, please try again.
^C

Setting krb5_use_enterprise_principal=False for booth domain in sssd.conf
solves the problem.
}}}