KDC fails to start with error message "krb5kdc: master key type mismatch"

Possible Cause:  

  1. The master key type specified with the -k command line option does not match with the one in eDirectory.
  2. Realm was created with the default value for the master key type but the -k command line option with appropriate type was not specified while invoking the KDC.

Action:  Specify the correct master key type with -k option. If you have created the realm with the default master key type, specify DES3-HMAC-SHA1 as the value for -k option.