krb4 access with heimdal + kpasswd problem

[torbjorn.lindh@allgon.se]

I have switched from kth-krb to heimdal and it works nicely except for
krb4-clients (such as Ktelnet or /usr/athena/telnet). What I get is:

[ Trying mutual KERBEROS4 ... ]
[ Kerberos V4 refuses authentication because Can't decode authenticator
(krb_rd_req) ]
[ Trying KERBEROS4 ... ]
[ Kerberos V4 refuses authentication because Can't decode authenticator
(krb_rd_req) ]

This is my krb5.conf:

[libdefaults]
        default_realm = ALLGON.SE
	clockskew = 300
        krb4_get_tickets = yes
	v4_instance_resolve = false
	v4_name_convert = {
		host = {
			rcmd = host
		}
	}
	
[realms]
	ALLGON.SE = {
		kdc = kerberos.allgon.se
		default_domain = allgon.se
	}
[domain_realm]
	.allgon.se = ALLGON.SE

Another problem is that kpasswd does not work with my heimdal setup.
strace:in kpasswd made me believe that it tries to look up SRV-records for
kpasswd.upd so I added them.

Still the same problem:
$ kpasswd
toobii@ALLGON.SE's Password: 
New password: 
Verifying password - New password: 
kpasswd: krb5_change_password: Unknown error 4294967288
$ 

Any hints?