There's a closed pull request on the Samba Samba Github repository gensec_gssapi: Improve debug messages https://github.com/samba-team/samba/pull/5 Description: In particular, the KRB5KRB_AP_ERR_TKT_EXPIRED can happen on the server as well as the client Signed-off-by: Andrew Bartlett abartlet at samba.org