this is fixed at least in 16.04, from /lib/systemd/system/krb5-kdc.service.d/slapd-before-kdc.conf:
After=slapd.service ** Changed in: krb5 (Ubuntu) Status: Confirmed => Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to krb5 in Ubuntu. https://bugs.launchpad.net/bugs/652433 Title: Init script dependency error: krb5-kdc starts before slapd Status in krb5 package in Ubuntu: Fix Released Bug description: Binary package hint: krb5-kdc If Kerberos5 configured to use LDAP directory on the same computer, it does not launches at startup due to init script dependency is not configured. The update-rc.d script creates symlinks for krb5-kdc and slapd with the following names: S18krb5-kdc, S19slapd. This makes Kerberos key distribution center launch before LDAP directory which contains data for this service and I get the following in the /var/log/daemon.log: krb5kdc[1018]: Can't contact LDAP server - while initializing database for realm MYREALM I think its no problem to make KDC to start after LDAP server and it will definitely solve this issue. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/652433/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp