Additional info in:
Could you provide deterministic reproducer plus log files?
We might get different results in local testing without reasonable reproducer and thus we would not be able fix the bug.
Created attachment 1623152 [details]
Contains krb5.conf and sssd.conf.
I have an existing sssd/krb5 setup, and even if I'm not configured to use the KCM cache, if I remove sssd-kcm, I can no longer log in.