It looks like your server's keyfile has only keyid 0, while the kdc has keyid 2. Those need to be in sync.