Just a heads-up: since the krb5 1.7 release, the support for krb4 protocols has been dropped, which means it's probably safe to stop writing the krb.conf file when we configure Kerberos.