Possible Cause: The Service object is not assigned with rights on the realm container.
Action: Modify the realm by specifying that the corresponding Service object pertains to this realm as follows:
kdb5_util -D cn=admin,o=org modify_service -realm ATHENA.MIT.EDU cn=service-kdc,o=org
NOTE: For more information, refer to Modifying a Service.