I think that looks right, but you may need to use the -crypto switch in your ktpass command line
ktpass -princ xmpp/communicator.domain.local@DOMAIN.LOCAL -mapuser xmpp-openfire@communicator.domain.local -crypto all -pass * -ptype KRB5_NT_PRINCIPAL
Ktpass for valid crypto types