Heimdahl Kerberos on MacOSX 10.9.5 using pkinit produces verify error

[Glenn Machin]

The MIT KDC version is 1-10-3

When I perform a kinit on MacOSX 10.9.5 (Maverick)

    kinit -C KEYCHAIN -D KEYCHAIN:


It produces the following error on the KDC:

Aug 22 19:23:35 as36snllx krb5kdc[25098]: preauth (pkinit) verify 
failure: error:0D08303A:asn1 encoding 
routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error
Aug 22 19:23:35 as36snllx krb5kdc[25098]: AS_REQ (7 etypes {18 17 16 23 
3 2 1}) 134.253.253.38: PREAUTH_FAILED: gmachin at dce.sandia.gov for 
krbtgt/dce.sandia.gov at dce.sandia.gov, error:0D08303A:asn1 encoding 
routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error


Is this a known problem?

Any help would be appreciated?


Glenn