Certain authenticators (NTLM, Negotiate, Digest) can fail because of external reasons, like incorrect server challenges or system configuration, see JDK-8347778 for an example. These failures are then reported as a generic "Authentication failure" exception.

We should report the more detailed original exceptions when possible. This would enable the users to diagnose the issues.