Oh, and kinit with _udp entries worked fine in stable with krb5-user 1.12.1+dfsg-19+deb8u2. And now seems to work without them too.
Jochen -- The only problem with troubleshooting is that the trouble shoots back.
- Bug#856307: krb5-user: kinit fails for OTP user when using kdc... Jochen Hein
- Bug#856307: krb5-user: kinit fails for OTP user when usin... Sam Hartman
- Bug#856307: krb5-user: kinit fails for OTP user when ... Jochen Hein
- Bug#856307: krb5-user: kinit fails for OTP user when ... Jochen Hein
- Bug#856307: krb5-user: kinit fails for OTP user w... Sam Hartman
- Bug#856307: krb5-user: kinit fails for OTP us... Jochen Hein
- Bug#856307: krb5-user: kinit fails for OTP user when usin... Greg Hudson
- Bug#856307: krb5-user: kinit fails for OTP user when usin... Jochen Hein
