If the _srv_ is enabled then am i correct in assuming that we
wouldn't even
need kdc= records in krb5.conf ??>I tried removing kdc= linesand was unable to
authenticate.
In my experience, sssd relies upon the local kerberos stack. Maybe
others have different experiences.
mpapet