When seeing this: krb5_child.log:(Tue May 22 02:06:15 2018) [[sssd[krb5_child[1605]]]] [map_krb5_error] (0x0020): 1657: [-1765328228][Cannot contact any KDC for realm ‘MDS.XYZ’] Access denied Using keyboard-interactive authentication. Password: reverse the order of your DNS hosts in /etc/resolv.conf to this: [root@cm-r01dn07 sssd]# cat /etc/resolv.conf search mds.xyz nix.mds.xyz nameserver 192.168.0.224 nameserver 192.168.0.44 nameserver 192.168.0.45 [root@cm-r01dn07 sssd]# from this: [root@cm-r01dn07 sssd]# […]

When you get this message: May 21 00:13:31 nfs03.nix.mds.xyz [sssd[krb5_child[1822]]][1822]: Key table entry not found followed by: [[sssd[krb5_child[1752]]]] [k5c_setup_fast] (0x0020): 2628: [-1765328203][Key table entry not found] or similar, dig into the logs further to see this: (Mon May 21 00:13:33 2018) [[sssd[krb5_child[1824]]]] [find_principal_in_keytab] (0x0400): No principal matching host/nfs02.nix.mds.xyz@NIX.MDS.XYZ found in keytab. (Mon May 21 00:13:33 […]