we are experiencing similar behavior in the UI after a certificate update.
Though in our case the kinit trace results in a
 1622027606.25528: Received error from KDC: -1765328360/Preauthentication failed
kinit: Preauthentication failed while getting initial credentials
running kinit on remote machines for authentication still works fine. Only the UI
won't let us log in anymore.
Can you help, please?