You receive unlimited authentication popup and in proxy relatime monitor, you receive this error
gss_accept_sec_context() failed: Unspecified GSS failure. Minor code may provide more information.
Request ticket server HTTP/xxxx@xxxx
kvno
2 not found in keytab; keytab is likely out of date
This means, you have recreated a Kerberos ticket as your users still get the old one.
You need to ask to all your users to “Sign out”