seem to get updated?
By default the support for this is not compiled into the KDC; you need to specify the –with-kdc-kdb-update option to configure if you wish to enable this support. Note that this feature is marked in the Kerberos documentation as “not regularly tested”, so you should be careful if you decide to use this option. It also doesn’t work with slave servers.