In KdcComm.java there is a chance that the exception thrown is neither a KrbException nor an IOException, but some kind of RuntimeException (say, SecurityException). The cast on line 253 would cause a ClassCastException.