Can you clarify for me exactly what dns_lookup_kdc does?
I am trying to help a user debug something. The user's config file has
and then does not specify any realms under [realms].
To my intuition, it should mean that nothing works at all.
But experimentally, it does work.
Doing some tcpdumping, I can see it do a DNS lookup to find the KDCs, even though dns_lookup_kdc is set false.
Perhaps the dns_lookup_kdc only affects realms that are defined in your [realms] section?