...when krb5_get_init_creds_password() is invoked for a prinicpal that requires
preauthentication and only supports weak crypto (and allow_weak_crypto
is not specified).  It should fail, clearly, but probably in some speedier
and more comprehensible fashion.
 
-Kevin Wasserman