Help – 127.0.0.1 added to realm name in AuthenticationAuthority attribute

Some of the users I’m creating manually in WGM have some extra text in their AuthenticationAuthority attribute. Specifically, “127.0.0.1” gets appended to the KDC’s (or ODM’s, same box) domain name / realm name. Like this…

First, here’s a valid AuthenticationAuthority attribute:

;Kerberosv5;0x467ff3c62766e16b0000000c0000000c;u5@COLX01.SD54.K12.IL.US;COLX01.SD54.K12.IL.US;1024 35 172002164541737449333833378346104778130026455115110587549838767307397149868755989830719221795635820059940707848749689216678699143872243728979530899017106285141695064886155351963398349346721132834793903014786576901621994139570832654671167446956241043799250263387270965238608922673162372878993005727012262611791 root@colx01.sd54.k12.il.us:10.135.0.1

And here’s a bad one. Notice the 127.0.0.1 at the end of the ODM/KDC’s domain name:

;Kerberosv5;0x467ff3cc6adc6bd00000000d0000000d;u6@COLX01.SD54.K12.IL.US127.0.0.1;COLX01.SD54.K12.IL.US127.0.0.1;1024 35 172002164541737449333833378346104778130026455115110587549838767307397149868755989830719221795635820059940707848749689216678699143872243728979530899017106285141695064886155351963398349346721132834793903014786576901621994139570832654671167446956241043799250263387270965238608922673162372878993005727012262611791 root@colx01.sd54.k12.il.us:10.135.0.1

Any idea what would cause that to show up for some users, but not others?

Thanks