Maybe this is the same false positive/bug in the check that Stefan Gomann mentioned in this post:
KDC check fails due to “Record Mark” option in network package
Maybe this is the same false positive/bug in the check that Stefan Gomann mentioned in this post:
KDC check fails due to “Record Mark” option in network package