Don't cache active master key list in kadmind "kdb5_util use_mkey" should not require a kadmind restart to take effect. At the cost of fetching the K/M principal once for each key change operation, make kadmind use the current active master key list for each operation. https://github.com/krb5/krb5/commit/74c1420ea4dffc1105247e362decf608440751ae Author: Greg Hudson Commit: 74c1420ea4dffc1105247e362decf608440751ae Branch: master src/lib/kadm5/server_internal.h | 3 +++ src/lib/kadm5/srv/server_kdb.c | 25 ++++++++++++++++++------- src/lib/kadm5/srv/svr_principal.c | 16 +++++----------- 3 files changed, 26 insertions(+), 18 deletions(-)