On 05/31/2016 03:13 PM, Nathaniel McCallum wrote: > _kerberos-adm.REALM > _kerberos.REALM > _kpasswd.REALM _kerberos.REALM TXT is currently used to look up the realm of a hostname (see lib/krb5/os/hostrealm_dns.c), so we should use a different prefix label, like _krb5kdc or _kdc. I have no other objections.