What were you trying to do that didn't work?

Use the role to join to AD server

What is the impact of this issue to you?

When sssd.conf is misconfigured, executing privileged commands against MS ADS fails with error 15404 

How reproducible is this bug?

Only when users manually set krb5_canonicalize=true

Steps to reproduce
See KCS article https://access.redhat.com/solutions/7134391
Proposed fix

The role should ensure that krb5_canonicalize=false is set when running the ad_integration role internally to connect to AD Server. The ad_integration role has a variable ad_integration_sssd_settings that allows configuring sssd settings, the role should set this variable to configure krb5_canonicalize=false explicitly.