I thought /etc/krb5.conf controls which kerberos server the clients talk to. 

As a test, I removed /etc/krb5.conf and rebooted the client. After reboot, I 
can still log in and "kinit user" . 
Removing /etc/krb5.keytab, however would stop user from logging in and sssd to 
start. 

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Reply via email to