Problem: The principal has expired in the KDC database.
Solution: Contact your Kerberos system administrator to confirm the reason for the expiration and to re-enable the client entry in the KDC.
Until the KDC is updated (and propagated to any slave KDCs, if applicable), you will be unable to acquire a TGT ticket.