Thanks for the report.  This was fixed in krb5-1.2.3; closing ticket.