When a user first logs in they are not getting a kerberos ticket. When we do 'vastool klist' there is no ticket listed. Then we do 'vastool kinit' and the user gets the ticket. The user's UID is above 1000. This seems to be a timing issue. If we wait awhile before logging in after booting it does not happen.
Product defect 22819 in 3.5.2 and 4.0.1
Upgrade to later version of the product.