Chapter 11, "Configuring a Kerberos 5 Client" step 3 is potentially unclear -- it should be emphasized that the creation of the client host principal (the "addprinc -randkey host/blah.example.com" step) must be done on the server. There's also some poor grammar (such as the "Because you will never need to type the password for this principal again, and you probably do not want to bother coming up with a good password.") non-sentence.
I will fix this with the next release and post an errata on the website soon. Thanks you for the catch. This chapter as a whole should be a bit "tighter." That is one of my main goals for the chapter on the next release. Johnray
I have posted an errata for 7.3 and updated text in the current version of the documentation. Thank you so much for catching this! Johnray