Hello everbody,

i have set up a test-environment for Freeipa. There are one Ipa Server, three Ipa Clients and an Active directory.
The trust between AD and Ipa-Server is working. The AD-Users are also able to login via SSH to the IPA-Server, but not to the Clients.
The AD-Users can only login locally to the ipa clients via su.
The AD-Users are not able to login via SSH to the Ipa clients!
Getend passwd is working.

kinit aduser@ad.example is not working
kinit: KDC for Realm not found

Can you please help me?
Thank you

Logs of a client when i try to login as AD User via ssh:

(Tue Jun 29 15:06:39 2021) [sssd[ssh]] [accept_fd_handler] (0x0400): Client connected!
(Tue Jun 29 15:06:39 2021) [sssd[ssh]] [sss_cmd_get_version] (0x0200): Received client version [0].
(Tue Jun 29 15:06:39 2021) [sssd[ssh]] [sss_cmd_get_version] (0x0200): Offered version [0].
(Tue Jun 29 15:06:39 2021) [sssd[ssh]] [ssh_cmd_parse_request] (0x0400): Requested domain []
(Tue Jun 29 15:06:39 2021) [sssd[ssh]] [ssh_cmd_parse_request] (0x0400): Parsing name [administrator@ad.example][]
(Tue Jun 29 15:06:39 2021) [sssd[ssh]] [sss_parse_name_for_domains] (0x0200): name 'administrator@ad.example' matched expression for domain 'ad.example', user is administrator
(Tue Jun 29 15:06:39 2021) [sssd[ssh]] [sss_ssh_cmd_get_user_pubkeys] (0x0400): Requesting SSH user public keys for [administrator] from [ad.example]
(Tue Jun 29 15:06:39 2021) [sssd[ssh]] [sss_dp_issue_request] (0x0400): Issuing request for [0x40ba50:1:administrator@freead.msp.local]
(Tue Jun 29 15:06:39 2021) [sssd[ssh]] [sss_dp_get_account_msg] (0x0400): Creating request for [ad.examplel][0x1][BE_REQ_USER][1][name=administrator]
(Tue Jun 29 15:06:39 2021) [sssd[ssh]] [sss_dp_internal_get_send] (0x0400): Entering request [0x40ba50:1:administrator@ad.example]
(Tue Jun 29 15:06:39 2021) [sssd[ssh]] [ssh_user_pubkeys_search_next] (0x0400): Requesting SSH user public keys for [administrator@ad.example]
(Tue Jun 29 15:06:39 2021) [sssd[ssh]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x40ba50:1:administrator@ad.example]
(Tue Jun 29 15:06:39 2021) [sssd[ssh]] [client_recv] (0x0200): Client disconnected!