AS_REQ Return code 60 for principal expired?

[Tom Yu]

Mike Friedman <mikef at berkeley.edu> writes:

> I've been doing some testing of my programs that use the MIT API against a 
> KDC running 1.6.1 on a Linux system.  On all prior systems where I've run 
> a KDC, and according to the Kerberos docs, a principal expired condition 
> should set a return code of 1.  But on this test system, it seems I'm 
> getting back a 60, which the docs define as a 'generic error'.

I am unable to reproduce this condition.  Is the krb5-1.6.1 KDC
possibly built using the --with-vague-errors option?