realmd::krb_config unable to set multiple kdc + nesting does not work correctly...

[kratan]

Hi,

realmd::krb_config:
  logging:
    default: FILE:/var/log/krb5libs.log
  libdefaults:
    dns_lookup_realm: true
    dns_lookup_kdc: true
    kdc_timesync: 1
    rdns: false
    ccache_type: 4
    ticket_lifetime: '24h'
    forwardable: 'true'
    proxiable: 'true'
    default_realm: "%{lookup('domain::krbname')}"
    #default_ccache_name: 'FILE:/tmp/krb5cc_%{euid}'
    default_ccache_name: "KEYRING:persistent:%{literal('%')}{uid}"
  domain_realm:
    .%{lookup('domain::krbname')}: "%{lookup('domain::krbname')}"
    "%{lookup('domain::name')}": "%{lookup('domain::krbname')}"
    .%{lookup('domain::name_at')}: "%{lookup('domain::krbname')}"
    "%{lookup('domain::name_at')}": "%{lookup('domain::krbname')}"
  realms:
    "%{lookup('domain::krbname')}":
      kdc: "%{lookup('domain::controllers.0')}"
      kdc: "%{lookup('domain::controllers.1')}"
      admin_server: "%{lookup('domain::controllers.0')}"
  appdefaults:
    pam:
      "%{lookup('domain::krbname')}":
        cache: "KEYRING:persistent:%{literal('%')}{uid}"
        ignore_k5login: true

renders to:

[appdefaults]
pam = {
EXAMPLE.LOCALDOMAIN = {"cache"=>"KEYRING:persistent:%{uid}", "ignore_k5login"=>true}
} ----> see here, nesting is not render correctly
[domain_realm]
.EXAMPLE.LOCALDOMAIN = EXAMPLE.LOCALDOMAIN
.localdomain = EXAMPLE.LOCALDOMAIN
example.localdomain = EXAMPLE.LOCALDOMAIN
localdomain = EXAMPLE.LOCALDOMAIN
[libdefaults]
ccache_type = 4
default_ccache_name = KEYRING:persistent:%{uid}
default_realm = EXAMPLE.LOCALDOMAIN
dns_lookup_kdc = true
dns_lookup_realm = true
forwardable = true
kdc_timesync = 1
proxiable = true
rdns = false
ticket_lifetime = 24h
[logging]
default = FILE:/var/log/krb5libs.log
[realms]
EXAMPLE.LOCALDOMAIN = {
admin_server = dc1.example.localdomain
kdc = dc2.example.localdomain
} ----> second kdc entry is missing

greets