@croos would be very interested to see your (sanitized) config from your post including sssd.conf/krb5.conf/ etc etc