kpropd can modify the KDB with ulog_replay(), so it should read the KDC profile settings in case the KDB configuration is in there. https://github.com/krb5/krb5/commit/52bae3736c1835b8d7ba6b2e8bda370fe58f044b Commit By: ghudson Revision: 24519 Changed Files: U trunk/src/slave/kpropd.c