Found this in kadmind.log file:
kadmin.local(Error): WARNING! Cannot find dictionary file /usr/share/dict/words, continuing without one.
`yum install words' fixes the warning.
Should ipa-server depend on the package `words' to make Kerberos happy? Or should krb5-server itself depend on words?
# rpm -q krb5-server ipa words
Adding krb5 maintainer to cc list.
I don't believe this is an issue for IPA. I suspect that this is used so the KDC can use cracklib to validate passwords. IPA does its own policy enforcement and this is not used.
The kadmind(8) page has a bit more on what the file is used for, though it could as easily not be referenced by the default configuration.
Yes this is an issue though we think it is not worth fixing.