- krb5.conf changes from kldap to ipakdd.so - dirsrv changes to cn=config for EXTERNAL auth - krbMkey change of format, from single value to multivalue - changes to config to start kadmin instead of ipa_kpasswd - add new schema