If subtrees configured for the realm span across partitions, and if the search scope for the realm is set to subtree, do one of the following:
Set the referral option to on the LDAP server configured for Kerberos services.
Make sure that all the partitions holding the subtree data are present on the LDAP server.