Hi jerdill,
May I know what is the version of agent you are using and also the OS X/MacOS version? If this is not there, could you try to rejoin and see if it will help?
If the application are able to deal with the kerberos, you can try the below approach instead:
1. Modify the /ect/centrifydc/centrifydc.conf with commenting out "
adclient.autoedit: true
"
2. Save and run "sudo adreload" to take effect
3. Run kinit <computer hostname>$
4. It should generate the kerberos ticket for the machine which you can use it and this will be a securer way.
The password should be correct if this is in sync with AD, you can check if it is in connected mode "adinfo -m". And you can verify the password to AD using the following command:
adinfo -A --user <computer hostname>$ <domain>
Hope this helps.
Regards,
Albert