A tcp kpasswd service is required if only admin_server is specified in 
krb5.conf .

A patch for this bug is attached.