Preauth failed

[Sam Hartman]

Hi.  You probably want to remove the requires_preauth attribute for
the cross-realm keys and for the local krbtgt key.
That will probably help with windows.

You may find that upgrading to the krb5-kdc package from Debian
unstable (which can probably be rebuilt for stable fairly easily)
fixes your Solaris problems.  

Sun may also have a patch for the etype_info
issue available; I'm not sure.