> How are folks performing functional testing of KDCs (without PKINIT)?
We have a very primitive Nagios/Icinga plugin (loosely based on [1])
which invokes `kinit' with a keytab. This verifies that the round-trip
principal->KDC->OpenLDAP is possible.
-JP
[1] http://exchange.nagios.org/directory/Plugins/Security/check_kdc/details