search for: kbd5

...0-99999 >         idmap config * : backend = tdb >         store dos attributes = Yes >         cups options = raw >         acl allow execute always = Yes >         map acl inherit = Yes >         hosts allow = 127. 192.168.1. >         vfs objects = acl_xattr > This is my kbd5.conf > # Configuration snippets may be placed in this directory as well > #includedir /etc/krb5.conf.d/ > > #includedir /var/lib/sss/pubconf/krb5.include.d/ > [logging] >  default = FILE:/var/log/krb5libs.log >  kdc = FILE:/var/log/krb5kdc.log >  admin_server = FILE:/var/lo...

Have you seen : ( centos/redhat ) https://outsideit.net/realmd-sssd-ad-authentication/ ( debian/ubuntu ) http://www.alandmoore.com/blog/2015/05/06/joining-debian-8-to-active-directory/ but i must say, i havent tested/tried these, i dont use sssd. But i think these are usefull for you to read at least. If you use the debian variant, you may need to install also : One or more of these :