trying to configure kerberos in TM1 10.2

[bjones]

here's what i have in krb5.ini:
[libdefaults]
default_realm = XXX.COM
default_tkt_enctypes = rc4-hmac des-cbc-crc
default_tgs_enctypes = rc4-hmac des-cbc-crc
ticket_lifetime = 1200
[realms]
XXX.COM = {
kdc = yyy.xxx.com
admin_server = yyy.xxx.com
default_domain = xxx.com
}
[domain_realm]
.xxx.com = XXX.COM
[appdefaults]
autologin=true
forward=true
forwardable=true
encrypt=true

After i do a kinit procedure i get:

com.ibm.security.krb5.internal.KrbException, status code: 41
message: Message stream modified

I also get in the error log:

Applix TM1->PerformSingleSignOn login Exception javax.security.auth.login.FailedLoginException: Login error: com.ibm.security.krb5.KrbException, status code: 0
message: Cannot find KDC for realm XXX.COM

Anyone had this issue before