[sssd]
services = nss, pam
domains = files.example
[domain/files.example]
id_provider = files

auth_provider = krb5
krb5_server = kerberos.example.com:88
krb5_realm = EXAMPLE.COM
krb5_store_password_if_offline = True

cache_credentials = True
debug_level = 10

[user@host][~]$ssh lslebodn@localhost
lslebodn@localhost's password: 
Last login: Thu Nov 30 11:15:14 2017 from ::1
[lslebodn@host ~]$ klist 
Ticket cache: KCM:1001:87222
Default principal: lslebodn@EXAMPLE.COM

Valid starting       Expires              Service principal
11/30/2017 11:20:15  11/30/2017 21:20:15  krbtgt/EXAMPLE.COM@EXAMPLE.COM

[root@host ~]# ldbsearch -H /var/lib/sss/db/cache_files.example.ldb '(cachedPassword=*)' dn cachedPassword 
asq: Unable to register control with rootdse!
# record 1
dn: name=lslebodn@files.example,cn=users,cn=files.example,cn=sysdb
cachedPassword: $6$xJdcd9mb35vxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

# returned 1 records
# 1 entries
# 0 referrals

[root@host ~]# touch /etc/passwd
[root@host ~]# ldbsearch -H /var/lib/sss/db/cache_files.redhat.ldb '(cachedPassword=*)' dn cachedPassword 
asq: Unable to register control with rootdse!
# returned 0 records
# 0 entries
# 0 referrals