Joined AD domain but cannot login

I was able to join my AD domain, via CLI, but was unable to login. I did notice “kerberos_init_password” errors in /var/log/samba/log.wb-DOMAIN.

I searched Bugzilla and found an answer in Bug # 851131.

The short and quick answer is to turn off AppArmour. That will allow AD logins.

Instead of what you did,
Try joining the Domain using the YAST applet, it should configure everything that’s necessary.