In a full install of BETA1, there are two Kerberos ports listening, eklogin kshell These are a security risk. RedHat6.2 had these disabled by default.
Fixed in krb5-1.1.1-23.