>If the _srv_ is enabled then am i correct in assuming that we wouldn't even
>need kdc= records in krb5.conf ??
>I tried removing kdc= linesand was unable to authenticate.

In my experience, sssd relies upon the local kerberos stack.  Maybe others have different experiences.

mpapet