This is a regression found by our QA. We would like to address it in order that winbind uses the correct KDC when getting Kerberos tickets. I already have a patchset addressing the issue.