Title: #6021: [Backport][ipa-4-9] krb5: Pin kpasswd server to a primary one
This PR was opened automatically because PR #6017 was pushed to master and backport to
ipa-4-9 is required.
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6021/head:pr6021
git checkout pr6021