We've setup the appropriate ports on our firewall so that our clients can get kerberos tickets off-site - the plan was to authenticate to our VPN this way.
We have 2 kdcs (kdc1 and kdc2) and I've made kdc1 externally accessible. Everything worked well when I tested yesterday afternoon, I...