What does "Client credentials have been revoked" mean?

[Richard Sharpe]

Hi folks,

On one system, when joined to AD, after ten minutes or so, we see the following:

libads/kerberos_util.c:101(ads_kinit_password)

  kerberos_kinit_password some-machine$@some.domain.some-tld failed:
Clients credentials have been revoked

What might be the cause of this? Has anyone here seen it?

There seems to be lots of questions of this type on the web.

-- 
Regards,
Richard Sharpe
(何以解憂？唯有杜康。--曹操)