Unfortunately on AIX, you will need to rebuild your application when you upgrade Kerberos. It's possible to work around this, but doing so is something that requires significant understanding of AIX linker behavior and is something we do not support. --Sam