Heimdal on 8.1 ASN.1 Encoding

[Jason C. Wells]

Some time ago I gave 8.0 a try as a Heimdal KDC.  I tried again today 
with 8.1.  With new principals and new keytabs I get this error:

Kerberos V5 refuses authentication because Read req failed: ASN.1 
encoding ended unexpectedly

Any ideas what this might be?  My kdc.conf and krb5.conf are minimal 
with no tinkering with keytypes.

Thanks,
Jason C. Wells