3.3.5.6.2 Referrals
The KDC supports referral processing [Referrals-11] sending a KDC and domain to use to answer a client's request.
KILE concatenates the following information to use as the key salt for realm trusts:
Inbound trusts: <all uppercase name of the remote realm> | "krbtgt" | <all uppercase name of the local realm>
Outbound trusts: <all uppercase name of the local realm> | "krbtgt" | <all uppercase name of the remote realm>