I have opened a ticket in RT for this problem. Fixing it is going to require changes to both the ptserver and aklog. For the time being adding domain realm mappings to the krb5.ini is going to be the only method of addressing the issue.
http://rt.central.org/rt/Ticket/Display.html?id=64147 Jeffrey Altman
smime.p7s
Description: S/MIME Cryptographic Signature
