Narrowing down the problem

[Harald Barth]

This an unusual kerberos setup. Unusual setups make things more
complicated than necessary.

My guess according your info in krb5.conf is:

/etc/krb.conf should start with

APD.POK.IBM.COM
APD.POK.IBM.COM		pafsdb1.pok.ibm.com:88

I hope :88 to change the port does work in /etc/krb.conf.

/etc/krb.realms should contain

.pok.ibm.com		APD.POK.IBM.COM

Test your krb4 setup with kauth -d from the kth-krb distribution.

Harald.