Ok. Removing and recreating /var/lib/sssd worked.
Thank you very much
> On Thu, Mar 09, 2017 at 12:14:08AM -0000, Maciej Piechotka wrote:
>
> It looks like due to the misconfiguration(?) SSSD stored a wrong
> representation of the canonical Kerberos principal in its cache. I think
> the only way to get around this is to remove the entry from the cache
> and the easiest way to do this is to remove the cache with rm. Please
> note that this will remove all cached password for the offline usage as
> well. If this is not acceptable you can use the ldbedit utility to only
> remove the offending entry.
>
> HTH
>
> bye,
> Sumit
>