This could appear due to a timeout in krb5 auth.
It can be corrected adding the following line in sssd.conf :
krb5_auth_timeout = 60 
Where 60 is the time needed.