Comment 3 for bug 1363980

Hi. Here's the rationale behind the krb5-kdc krb5-kadmin-server split.
The krb5-kdc package includes the things you'd need on a traditional slave KDC. One of the key things about a slave KDC is that the database is read-only. The slave is not making any changes to the database, locally or otherwise.
So, kadmin.local does not belong on a slave KDC.
However krb5-admin-server includes the stuff you need for a master KDC: local administration tools, the admin server, etc.
I'd be interested in documentation/description suggestions if this could be made more clear.

However, I would not support changing the binary location in Debian.