Rebase krb5 to 1.14.x to include at least the CAMMAC feature planned to be consumed in the Identity Management in RHEL.
to address #comment 28 - sorry i missed it, but kaleem has ack'd bz1224057 and IPA QE plans to test for it
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHSA-2016-2591.html