First, sorry for not being able to use the PR method to submit these 'bugs' I am finding. My Kerberos boxes are in a testbed with no working mail. Second, I hope these are not annoying. I have been trying to submit things I generally think do need improvement for any future reader. http://web.mit.edu/Kerberos/krb5-1.5/krb5-1.5.1/doc/krb5-install/Add-Kerberos-Principals-to-the-Database.html#Add%20Kerberos%20Principals%20to%20the%20Database "Once your KDCs are set up and running, you are ready to use kadmin to load principals for your users, hosts, and other services into the Kerberos database. This procedure is described fully in the "Adding or Modifying Principals" section of the Kerberos V5 System Administrator's Guide. (See Create Host Keys for the Slave KDCs, for a brief Okay! description.) The keytab is generated by running kadmin and issuing the ktadd command." What keytab? That last sentence is dangling out there on its own out of context.