Reproduction recipe: make testrealm kadmin.local -q 'addprinc -pw pass +requires_preauth -e des-cbc-crc:normal test' kinit test (enter the right or wrong password)