Parsing the dump file is probably your best bet at this time, either that or switch to the LDAP backed and use LDAP to query the KDB, or load the dump into a an LDAP KDB just for this purpose and do the same. My advice: parse the dump format. It's relatively simple for most of the things you want...