kpropd can modify the KDB with ulog_replay(), so it should read the KDC profile settings in case the KDB configuration is in there. http://src.mit.edu/fisheye/changelog/krb5/?cs=24519 Commit By: ghudson Revision: 24519 Changed Files: U trunk/src/slave/kpropd.c