[sssd]
domains = LDAP-KRB5
services = nss, pam
 
[domain/LDAP-KRB5]
debug_level = 9
id_provider = ldap
ldap_uri = ldap://$SERVER
ldap_search_base = dc=example,dc=com
auth_provider = krb5
krb5_server = $SERVER
krb5_realm = EXAMPLE.COM

expect -f - <<<'
    spawn ssh -o StrictHostKeyChecking=no puser1@localhost
    expect "password: "
    send -- "$pass\r"
    expect "$ "
    sleep 1
    send -- "klist\r"
    expect "$ "
    sleep 15
    send -- "exit\r"
' &

sleep 5

expect -f - <<<'
    spawn ssh -o StrictHostKeyChecking=no puser1@localhost
    expect "password: "
    send -- "$pass\r"
    expect "$ "
    sleep 1
    send -- "klist\r"
    expect "$ "
    sleep 10
    send -- "exit\r"
' &

sleep 5

expect -f - <<<'
    spawn ssh -o StrictHostKeyChecking=no puser1@localhost
    expect "password: "
    send -- "$pass\r"
    expect "$ "
    sleep 1
    send -- "klist\r"
    expect "$ "
    send -- "exit\r"
'