add default_ccache_name = KEYRING:persistent:%{uid} in your krb5.conf under [libdefaults]. the cifs upcall needs to know where to look