Hi,
I can configure sssd to use ldap as an id provider, and AD (krb5) as auth provider, but I guess this poses problems for some web applications, because some of these don't know anything about krb and will look for userPassword instead?
Sincerely, PieterB