First off, it's a little irritating to have to move a working ldap.conf and krb5.conf to sssd.conf.
but ignoring that
Setting up a SSSD domain to authenticate against a windows 2003 KDC generates the rather unhelpful message 'KDC reply did not match expectations.'
the krb5 settings are minimal:
auth_provider = krb5
krb5_realm = MYDOMAIN.LOCAL
krb5_kdcip = 192.168.0.4
Anyone have any idea what I'm missing?