Use dc=example,dc=com as the example base DN instead of more archaic forms. Provide a little more cross-referencing of concepts and mechanisms. Add additional steps in the OpenLDAP setup instructions for choosing DNs for the Kerberos container, KDC service, and kadmin service. Explain a little bit about what the Kerberos container and realm container are. Be clearer that using separate subtrees from the realm container for principals is an option, not a necessity, and don't use the base DN as an example of a separate subtree (it's confusing). https://github.com/krb5/krb5/commit/4125cc91be0ab7d4759492efbbeff4da73903ba8 Commit By: ghudson Revision: 22088 Changed Files: U trunk/doc/admin.texinfo