Possible Cause: Admin service object is not assigned with sufficient rights over the realm container.
Action: Create admin service object as follows:
kdb5_util - D cn=admin,o=org create_service -admin - realm ATHENA.MIT.EDU - randpw - f /home/andrew/conf_keyfile cn=admin-service,o=org
NOTE: Ensure that the administrative service object dn is specified in the krb5.conf file.