The only open issue we have with IPA is Windows clients not being directed
to the Kerberos servers of the IPA realm.
We can solve this issue using domain_realm registry keys as mentioned on
the mailing list before.
But is there any different method to accomplish this?
As far as I know/read, Windows clients only use SRV DNS records (and can
fail back to NetBIOS-based discovery) to locate domain services, not TXT
records.
As IETF Kerberos Clarification drafts recommend against using (then)
unsecured DNS for domain_realm mappings.
So TXT DNS domain_realm mappings are also not an option.
Sincerely
Pieter