Report from submitter :

If we use -Dsun.security.krb5.debug=true, and if one of the service ticket is
destroyed, the endTime on service ticket is null - it ends up throwing NPE.
This blocks us from reaching root cause of other issues we are trying to
debug.

2016-01-28 22:51:46.171 b.s.s.a.k.KerberosSaslTransportPlugin [ERROR] Client failed to open SaslClientTransport to interact with a server during session initiation: java.lang.NullPointerException java.lang.NullPointerException
at javax.security.auth.kerberos.KerberosTicket.getEndTime(KerberosTicket.java:482) ~[?:1.8.0_40]
  at sun.security.jgss.krb5.SubjectComber.findAux(SubjectComber.java:160)
~[?:1.8.0_40]