Does anyone know if there's any possibility of extracting keys from an active directory and loading them into a Heimdal KDC (or even an MIT one)? I couldn't find any relevant info from a web search. The scenario is Windows pass-through login trusting Heimdal for SSO, and wanting to avoid resetting passwords on Windows accounts.