If you send pdata in a request and the MIT KDC doesn't understand any of the padata types at all then it returns failure. It should only return failure in this case if the principal requires preatuh. Thanks to Doug for discovering this.