SSSD provides Kerberos plugin > to tell the Kerberos libraries what Realm and which KDC to use. It's useful to see what is happening during kinit in case of any issues. Related: https://pagure.io/freeipa/issue/8353 Signed-off-by: Stanislav Levin <slev@altlinux.org> Reviewed-By: Francois Cami <fcami@redhat.com> Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>