On Fri, Aug 03, 2012 at 03:02:00PM +0200, Ondrej Valousek wrote:
From the bug you mentioned it looks like the kpasswd dns entry is only needed for the
password management, right?
However, I can happily run kpasswd & change my password even when no _kpasswd dns srv
record is present.
Could you please clarify?
We fall back to using KDC for password change operations when no kpasswd
is explicitly specified. So I guess your KDC serves were also running
the kpasswd services?