hpropd can read MIT Kerberos dump, the format is the same as used in mit-kerberos 1.0b7, and to dump that format use the following command: ‘kdb5_util dump -b7’.
To load the MIT Kerberos dump file, use the following command:
‘/usr/heimdal/libexec/hprop --database=dump-file --master-key=/var/db/krb5kdc/mit_stash --source=mit-dump --decrypt --stdout | /usr/heimdal/libexec/hpropd --stdin’
When migrating from a Kerberos 4 KDC.
‘hprop -n --source=<NNN>| hpropd -n’
Replace <NNN> with whatever source you have, like krb4-db or krb4-dump.
Make sure that all things that you use works for you.
Find a sample population of your users and check what programs they use, you can also check the kdc-log to check what ticket are checked out.
Things that might be hard to get away is old programs with support for Kerberos 4. Example applications are old Eudora installations using KPOP, and Zephyr. Eudora can use the Kerberos 4 kerberos in the Heimdal kdc.