What to do with "Message stream modified" error when authenticating with kerberos on Tomcat?

Question

tomcat

I've been trying to teach Tomcat to recognize domain users for several days now. Cursed everything in the process. Did on Windows Authentication How-To . Achieved a certain effect, Tomcat began to contact the domain controller. It does, however, without success. In the logs, at first there were errors "Checksum failed" (if using keytab with kvno 0) and "Specified version of key is not available" (in case of actual kvno), now it suddenly started receiving "Message stream modified". On the Internet, it is advised to write the name of the realm in uppercase in krb5.conf about this. Very valuable advice, given that the realm was originally written that way.
In the console, the kinit, klist and kvno commands with the same keytab please me with successful execution results. Where to dig further already and I won’t put my mind to it. Save!