"Sam Hartman via RT" <rt-comment@krbdev.mit.edu> writes:

> No matching key in entry means that you included an encrypted
> timestamp with an enctype that the KDC couldn't find for the key.  Do
> principals that work have a different set of encryption types than
> principals that fail?

I don't believe so.  Given that my mother hasn't complained about not
being able to check her mail, I'm assuming that hers still works.
"getprinc" shows the same set of keys as with my principal.

When I have a free moment, I will create a new principal and try to
reproduce.

--Jered