--- source3/libsmb/cliconnect.c	2025-01-08 11:47:16.000000000 +0100
+++ source3/libsmb/cliconnect.c.new	2025-01-22 13:04:07.677095593 +0100
@@ -215,7 +215,7 @@
 				goto fail;
 			}
 		}
-	} else if (use_kerberos && !fallback_after_kerberos) {
+	} else if (use_kerberos) {
 		const char *error_string = NULL;
 		int rc;
 
--- auth/credentials/credentials.c	2025-01-08 11:47:16.000000000 +0100
+++ auth/credentials/credentials.c.new	2025-01-22 15:03:50.852556573 +0100
@@ -494,6 +494,10 @@
 		return true;
 	}
 
+	if (cli_credentials_get_kerberos_state(cred) == CRED_USE_KERBEROS_DESIRED) {
+		return true;
+	}
+
 	gensec_features = cli_credentials_get_gensec_features(cred);
 	if (gensec_features & GENSEC_FEATURE_NTLM_CCACHE) {
 		return true;