There are frequent log messages in sssd.log, I think we could avoid them by some minor adjustment of /etc/sssd/sssd.conf Example: [sssd] [sss_ini_call_validators] (0x0020): [rule/allowed_domain_options]: Attribute 'pwfield' is not allowed in section 'domain/foopt1.net'. Check for typos.