SPNEGO login failed: {Access Denied} A process has requested access to an object but has not been gr

I try to set up a new department server using Ubuntu Bionic Beaver.

The fileserver part is supposed to serve files for windows machines, and integrate in the company network which uses Active Directory.

So we installed samba, the centrify express agent for ubuntu, and the debian integration with samba package from

https://www.centrify.com/express/linux/download-files/?_ga=2.46390703.949394481.1553244143-2113436499.1546513343#accordion-download-express-02

It almost works. With my account everything is fine. But if I try any other account, I get the following error:

~$ smbclient -L hugo -U qdm1.arad -d3
lp_load_ex: refreshing parameters
Initialising global parameters
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
Processing section "[global]"
added interface ens160 ip=192.168.170.140 bcast=192.168.170.255 netmask=255.255.255.0
Client started (version 4.7.6-Ubuntu).
tdb(/var/cache/samba/gencache.tdb): tdb_open_ex: could not open file /var/cache/samba/gencache.tdb: Permission denied
resolve_lmhosts: Attempting lmhosts lookup for name hugo<0x20>
resolve_wins: WINS server resolution selected and no WINS servers listed.
resolve_hosts: Attempting host lookup for name hugo<0x20>
Connecting to 192.168.170.140 at port 445
got OID=1.2.840.48018.1.2.2
Enter SYSTRONICS\qdm1.arad's password:
GENSEC backend 'gssapi_spnego' registered
GENSEC backend 'gssapi_krb5' registered
GENSEC backend 'gssapi_krb5_sasl' registered
GENSEC backend 'spnego' registered
GENSEC backend 'schannel' registered
GENSEC backend 'naclrpc_as_system' registered
GENSEC backend 'sasl-EXTERNAL' registered
GENSEC backend 'ntlmssp' registered
GENSEC backend 'ntlmssp_resume_ccache' registered
GENSEC backend 'http_basic' registered
GENSEC backend 'http_ntlm' registered
GENSEC backend 'krb5' registered
GENSEC backend 'fake_gssapi_krb5' registered
SPNEGO login failed: {Access Denied} A process has requested access to an object but has not been granted those access rights.
session setup failed: NT_STATUS_ACCESS_DENIED

After rerunning adbindproxy.pl, other accounts work for a while, but revert to this error after some time.

Any idea what might cause this?