gssapi ssh sso no principal in keytab matched desired name
When trying to ssh sso you are put at the password prompt and see the message:
no principal in keytab matched desired name
Using the -n option to change the host name when joining the system to the domain.
If joininig with -n not using the host name, then alias the host name ( short and long ) into the keytab if using gssapi.
You may also need to add it to the system in AD's servicePrincipalName as well. ( As long as its not conflicting. If it is conflicting, then when gssapi'ing need to use the joined name otherwise the wrong service ticket might be issued. )