i dont have access to those myself but another engineer has and i believe just showed that the kerberos ticket expired. odd thing that we see (as well as others is we have that policy set to 7 days but klist shows an expiration of 10 hrs. and unfortunately we are on server 2012 for our dc's so this policy called out in that article may not apply