grep -A10 appdefault /etc/krb5.conf
[appdefaults]
  pam = {
   forwardable = true
   validate = true
   debug = true
  }
  sssd = {
   forwardable = true
   validate = true
   debug = true
  }