Add code to your script that dumps the environment variables (sorted) to a file. Capture the outputs of successful and unsuccessful runs and diff the files. You'll probably find that the limited environment provided by cron and at is missing one or more environment variables that are required to allow kerberos clients to work correctly on your system. If this is the case, you can create a file that exports the missing variables and source it in the crontab entry.