That's true. AD (for some reason) does not populate KDCs _kpasswd services for sites (only for the whole domain). You have to create the appropriate SRV _kpasswd records manually :-( .

On 09/19/2012 03:35 PM, Michael Cronenworth wrote:

The LDAP and KERBEROS services detected the correct server name, but the KPASSWD service was "not found" so my system could not authenticate me.