Bernard Fay wrote:
passwd: files sss ldap shadow: files sss ldap group: files sss ldap
This mix makes no sense at all. Either you use nss_sss to query sssd (which has its own cache in /var/lib/sss/db) or you use nss_ldap (direct or via nss-pam-ldapd).
Decide which components you really want to use and clean your config before going any further.
Ciao, Michael.