Tickets accepted upon login but still prompted for password

[eichin-krb@thok.org]

Clearly, then, the machine is confused about what it's local realm
might be.  Does your krb5.conf have a [libdefaults] default_realm entry?