sssd version 1.15.0 running on Ubuntu Xenial. In my setup sssd is not automatically refreshing computer account tickets after 30 days, for some reason. I found te msktutil package, which has a cron job which runs msktutil --auto-update each day. So far so good. However msktutil --auto-update fails but msktutil --update works OK. Can anyone drop me a hint please why this might be so? Snippets from the verbose output below. /usr/sbin/msktutil --verbose --auto-update -- get_default_keytab: Obtaining the default keytab name: FILE:/etc/krb5.keytab -- create_fake_krb5_conf: Created a fake krb5.conf file: /tmp/.msktkrb5.conf-V1URdr -- reload: Reloading Kerberos Context -- finalize_exec: SAM Account Name is: and$ -- try_machine_keytab_princ: Trying to authenticate for and$ from local keytab... -- try_machine_keytab_princ: Error: krb5_get_init_creds_keytab failed (Preauthentication failed) -- try_machine_keytab_princ: Authentication with keytab failed /usr/sbin/msktutil --verbose --update -- get_default_keytab: Obtaining the default keytab name: FILE:/etc/krb5.keytab -- create_fake_krb5_conf: Created a fake krb5.conf file: /tmp/.msktkrb5.conf-QXmuHN -- reload: Reloading Kerberos Context -- finalize_exec: SAM Account Name is: and$ -- try_machine_keytab_princ: Trying to authenticate for and$ from local keytab... -- switch_default_ccache: Using the local credential cache: FILE:/tmp/.mskt_krb5_ccache-ZChBdy -- finalize_exec: Authenticated using method 1