I've run into the same issue. Current Samba and MacOS will connect with username / password from my MacOS Finder, but Kerberos doesn't accept the connection. I do see the Kerberos ticket getting generated. The same MacOS system will connect via Samba to older versions, so I'm wondering what the disconnect is or if there is a new configuration parameter I need. - M