On Tue, Apr 14, 2015 at 07:14:11PM +0200, Ola Nystrom wrote: > ldap_referrals = false referrals are already disabled by default with the ad provider btw > krb5_use_kdcinfo = false Any particular reason to disable kdcinfo files? > krb5_store_password_if_offline = true