I think not, that's normal for the first kinit if the client doesn't know that the server requires preauth. It will just adapt and request it again.
You may have to bump the logging level, although the manpage doesn't mention this (search for ad_gpo_access_control in https://www.systutorials.com/docs/linux/man/5-sssd-ad/). Try debug_level 3 or 4 in the sssd.conf sections (probably just the ad domain one). -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1742752 Title: system error(4) since latest update on xenial To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1742752/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs