https://bugzilla.redhat.com/show_bug.cgi?id=2333529
--- Comment #8 from Alexey Tikhonov atikhono@redhat.com ---
Consequently, SSSD is not working in the container when /var/lib/sss/mc and /var/lib/sss/pipes are bind-mounted from the host.
What exactly is broken?
IIRC, '/var/lib/sss/pipes' ownership is checked only for PAM requests.
Maybe custom '--uidmap' while running container can help.