The plan is to merge krb5.conf and kdc.conf in a manner similar to Heimdal. So, yes, currently you need to put these in krb5.conf. Hopefully by the 1.5 release kdc.conf will just be extra krb5.conf paramaters read by a kdc. --Sam