change master_kdc setting in kerb5.conf

NEWS

@@ -6,6 +6,11 @@ release/005.005 (unreleased)
     unless specifically overridden to false Kerberos
     clients will behave as they always have. [adamhl]
 
+    [kerberos] Chnage the master_kdc setting in krb5.conf to point to an
+    alias of the master (kerberos1). This will have not change how the
+    configuration works, but makes it easier to change the ordering of the
+    replicas if, in the future, we need to.
+
 release/005.004 (2017-01-09)
 
     [os] Change the exec resource in the 'aptitude' staged

templates/kerberos/krb5.conf.erb

@@ -86,7 +86,7 @@ else
         kdc            = krb5auth1.stanford.edu:88
         kdc            = krb5auth2.stanford.edu:88
         kdc            = krb5auth3.stanford.edu:88
-        master_kdc     = krb5auth1.stanford.edu:88
+        master_kdc     = master-kdc.stanford.edu:88
         admin_server   = krb5-admin.stanford.edu
         kpasswd_server = krb5-admin.stanford.edu
 <%