Hi. d-i preseeding. I'd be happy to work with you if we can remove that from the equation.
I'd also be interested in why DNS srv lookups aren't good enough for you. If I had krb5-config to do again, I probably wouldn't support adding realms at all. The goals of krb5-config may not be entirely what you are hoping for. I'm happy to engage in a design discussion about what those goals should be, but let me explain my current thinking. Above all, it's desirable to respect any changes that the user has made to krb5.conf. We only add a realm, never updating it if it is there. The config script wants to make sure that servers are not updated for the right realm. So, it tracks two wvalues. There's krb5/add_servers, which is a boolean about whether to add servers and krb5/add_servers_realm, which is the realm about which that boolean is asked. If krb5/add_servers_realm ever differs from the default realm, then we forget any questions about servers we've asked previously because we're asking them about a different realm. >For seeding a config I'd expect you to need to set read_config to false, default_realm to your realm, add_servers to true and add_servers_realm to your default realm. I'd be very open to discussing better ways to do this.

