This indicates that they keys provided by the AD are not supported by the Kerberos implementation.
I suggest to dive into google this particular error since it is a network configuration issue. I did not encounter this error yet.
In order to solve this problem we switched off pre-authentication enabling to start the sso module. However when we start our application now using the login.html it just redirects you to the url host/sso/ which is just a blank page, no popup for windows authentication appears.
The error is also solved by removing the "use DES encrytpion type for this account." setting.
However it still resolves to being able to login to a blank page. Ill open a new post for this.