My guess is that you have the wrong kvno. Can you try runnig the kvno command on the principal in question immediately after a successful kinit? It's possible that your KDC won't let you find out the kvno that way in which case things are more difficult to diagnose.
--Sam -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
