If the _srv_ is enabled then am i correct in assuming that we wouldn't even need kdc= records in krb5.conf ??>I tried removing kdc= linesand was unable to authenticate.
In my experience, sssd relies upon the local kerberos stack. Maybe others have different experiences. mpapet