Apparently we share a bug with Microsoft in that our kadmind fails to return a wrong version error if it cannot understand the version of the change password protocol sent to it. This is bad for backward compatability of new clients.