Kerberos not working?

This should point to How-to: Handle s4-connector rejects, unfortunately not to be answered with an easy howto as different causes may lead into those errors. Only the logs can tell us more.