Re: kinit error message (Heimdal 7.4.0)

> I looked for that and couldn't find it.

I may have found it! The 1.5.X KDC has a mile long function
_kdc_as_rep() which in the middle somewhere has

 e_text = "No ENC-TS found";

That function looks quite different in 7.X....

> So, to reproduce just mark a principal as expired and try to kinit?

Yes. Your newer KDC may fill in something else in the
context->error_string or context->error_code compared to the return
value. So if you put a breakpoint at krb5_get_error_message and 
compare these with the variable "code" which should be -1765328383.

Harald.