The authenticator module did not compare the username with the principal name that was given by the GSSAPI server.