Fixed with the single-DES enctype mess in krb5-1.2.3.