[Sssd-maintainers] [Bug 2466974] New: SSSD 2.13 doesn't work in offline mode, generates plenty of Permission denied errors

https://bugzilla.redhat.com/show_bug.cgi?id=2466974

Bug ID: 2466974
           Summary: SSSD 2.13 doesn't work in offline mode, generates
                    plenty of Permission denied errors
           Product: Fedora
           Version: 44
          Hardware: x86_64
                OS: Linux
            Status: NEW
         Component: sssd
          Keywords: Regression
          Severity: medium
          Assignee: [e-mail]
          Reporter: [e-mail]
        QA Contact: [e-mail]
                CC: [e-mail], [e-mail],
                    [e-mail], [e-mail],
                    [e-mail], [e-mail],
                    [e-mail]
  Target Milestone: ---
    Classification: Fedora

After upgrading Fedora 43 to 44 windows domain accounts linked via freeipa
stopped working in offline mode. Also confirmed that installing fc43 packages
of sssd (v.2.12) to fc44 restores normal work. And upgrading them back to fc44
(v.2.13) restores the problem.
Logs are full of:

(2026-05-06 11:54:57): [ssh] [cache_req_common_process_dp_reply] (0x3f7c0):
[CID#7] CR #6: Data Provider Error: 3, 13, Permission denied
(2026-05-06 11:54:57): [ssh] [cache_req_common_process_dp_reply] (0x3f7c0):
[CID#8] CR #7: Data Provider Error: 3, 13, Permission denied
(2026-05-06 11:54:57): [nss] [cache_req_common_process_dp_reply] (0x3f7c0):
[CID#16] CR #140: Data Provider Error: 3, 13, Permission denied
(2026-05-06 11:55:00): [nss] [cache_req_common_process_dp_reply] (0x3f7c0):
[CID#16] CR #141: Data Provider Error: 3, 13, Permission denied
(2026-05-06 11:54:38): [pam] [cache_req_common_process_dp_reply] (0x3f7c0):
[CID#3] CR #7: Data Provider Error: 3, 13, Permission denied
(2026-05-06 11:54:57): [pam] [cache_req_common_process_dp_reply] (0x3f7c0):
[CID#4] CR #11: Data Provider Error: 3, 13, Permission denied
(2026-05-06 11:54:06): [sudo] [cache_req_common_process_dp_reply] (0x3f7c0):
[CID#1] CR #0: Data Provider Error: 3, 13, Permission denied
(2026-05-06 11:54:06): [sudo] [cache_req_common_process_dp_reply] (0x3f7c0):
[CID#1] CR #1: Data Provider Error: 3, 13, Permission denied
[ipa_dyndns_update_connect_done] (0x0040): Failed to connect to LDAP server:
[13](Permission denied)
[ipa_subdomains_refresh_connect_done] (0x0020): [RID#5] Unable to connect to
LDAP [13]: Permission denied
[ipa_subdomains_handler_done] (0x0020): [RID#5] Unable to refresh subdomains
[13]: Permission denied

Disabling selinux doesn't change anything.
If access_provider=permit - same result and errors.
If sssd goes online - everything works ok, no errors. 
Cleaning cache - no effect.
I compared file/forder permissions (/etc/sssd, /var/lib/sss) on fc43 (v2.12)
and fc44 (v.2.13) - didn't find any difference.

Reproducible: Always