OK, so the request is failing because the KDC doesn't like some option set in the request. My guess is that the FNAL.GOV KDC is fairly old, and we started setting some option by default. I'll ask upstream if they know what changed.
-- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]

