I do not believe that this patch is correct.

The SOCK_STREAM parameter to krb5int_locate_server does not determine
what type of connection is used to connect the kpasswd service.  The
SOCK_STREAM parameter is specified so that the lookup of the DNS SRV
record for the kadmin service will be performed using '_tcp' as the
kadmin service is a TCP only service.

Changing SOCK_STREAM to 'sockType' will cause the DNS SRV query to use
'_udp' which should always fail.  

This parameter is not used when searching the krb5.conf file.

Jeffrey Altman