[Freeipa-users] No more automatic web UI login with Kerberos

Hi, Before I recently upgraded my CentOS 8 Stream masters I was able to automatically login using the Kerberos ticket. On the older (CentOS 7) that still works. But not on the two newer systems. Everytime I refresh the login page a new file is created in /run/ipa/ccaches And the following shows up in the log. jul 13 14:49:36 iparep4.example.com [577]: GSSAPI client step 1 jul 13 14:49:36 iparep4.example.com [577]: GSSAPI client step 1 jul 13 14:49:36 iparep4.example.com [577]: GSSAPI Error: Unspecified GSS failure.  Minor code may provide more information (Credential cache is empty) jul 13 14:49:37 iparep4.example.com [576]: GSSAPI client step 1 jul 13 14:49:37 iparep4.example.com [576]: GSSAPI client step 1 jul 13 14:49:37 iparep4.example.com [576]: GSSAPI Error: Unspecified GSS failure.  Minor code may provide more information (Credential cache is empty) Logging with a username and password still works, but not the automatic Kerberos login. How can I debug this further? -- Kees