I would be interested in knowing why the 

  krb5_parse_name(context, aname, principal) 

call in KerbExternalNameToMITPrinc() is failing.  

What is the content of the 'aname' buffer?