On adding principal the error message displayed is add_principal: FAILED: Insufficient access

Possible Cause:  Admin service object is not assigned with sufficient rights over the realm container.

Action:  Create admin service object as follows:

kdb5_util - D cn=admin,o=org create_service -admin - realm ATHENA.MIT.EDU - randpw - f /home/andrew/conf_keyfile cn=admin-service,o=org

NOTE:  Ensure that the administrative service object dn is specified in the krb5.conf file.