- forwardable=yes -> forwardable=true, which should mean the same thing,

but matches the man page better
- take port numbers off of the server names; i'm assuming that it's rare
    for them to need specifying because i assume the defaults are used more
    often than not

krb5.conf

@@ -9,12 +9,12 @@
  dns_lookup_kdc = false
  ticket_lifetime = 24h
  renew_lifetime = 7d
- forwardable = yes
+ forwardable = true
 
 [realms]
  EXAMPLE.COM = {
-  kdc = kerberos.example.com:88
-  admin_server = kerberos.example.com:749
+  kdc = kerberos.example.com
+  admin_server = kerberos.example.com
  }
 
 [domain_realm]