kinit succeeded but ads_sasl_spnego_gensec_bind(KRB5) failed

[ghost]

2020-06-29 13:31:31:Cache directory is: /var/cache/samba
kinit succeeded but ads_sasl_spnego_gensec_bind(KRB5) failed for ldap/dc0.domain.alt with user[GP$] realm[DOMAIN.ALT]: Invalid credentials
2020-06-29 13:31:31:Unable to get GPO list for GP$ from dc0.domain.alt: ads_connect() failed: Invalid credentials
2020-06-29 13:31:31:Unable to refresh GPO list for GP$ from dc0.domain.alt
update_gpos (3221225581, 'The attempted logon is invalid. This is either due to a bad username or authentication information.')
2020-06-29 13:31:31:Backend execution error: (3221225581, 'The attempted logon is invalid. This is either due to a bad username or authentication information.')
2020-06-29 13:31:31:Username for frontend is set to administrator