As described in https://bugs.openjdk.java.net/browse/JDK-8274657, the following settings should be removed from the "Supported krb5.conf Settings" box in https://docs.oracle.com/en/java/javase/17/security/kerberos-5-gss-api-mechanism.html.

ap_req_checksum_type
default_checksum
safe_checksum_type