modifying the kdc

modifying krb5.conf

using kadmin.local on every replica to modify the principal; which is not working - as designed (?)- in IPA

What should I do to get a ticket with the correct R flag from IPA ? 

I don't think this is SSSD related (the service needing the renewable ticket this way is Apache Storm)

Thanks a lot!