Kerberos: LDAP error updating and removing service principals in AD

An LDAP error occurs while updating and removing service principals in clusters with Kerberos enabled using Active Directory.

The following exception is thrown when removing an account:

javax.naming.NamingException: [LDAP: error code 1 - 000020D6: SvcErr: DSID-0310081B, problem 5012 (DIR_ERROR), data 0
]
noformat}

The following exception is thrown when updating an account's password

javax.naming.NamingException: [LDAP: error code 1 - 000020D6: SvcErr: DSID-0310081B, problem 5012 (DIR_ERROR), data 0
^@]