>If the _srv_ is enabled then am i correct in assuming that we wouldn't even
>need kdc= records in krb5.conf ??
>I tried removing kdc= linesand was unable to authenticate.
In my experience, sssd relies upon the local kerberos stack. Maybe others have different experiences.
mpapet