System Administration Guide: Security Services  ProcedureHow to
Restrict Access to KDC Servers  Both master KDC servers and
slave KDC servers have copies of the KDC database stored
locally. Restricting access to these servers so that the
databases are secure is important to the overall security of the
Kerberos installation.    1. Disable remote services, as needed.
To provide a secure KDC server, all nonessential network
services should be disabled . Depending on your configuration,
some of these services may already be disabled. Check the
service status with the svcs command. In most circumstances, the
only services that would need to run would be krb5kdc and kadmin
if the KDC is a master. In addition, any services that use
loopback tli (ticlts, ticotsord, and ticots) can be left
enabled.      # svcadm disable network/comsat     # svcadm
disable network/dtspc/tcp     # svcadm disable network/finger
# svcadm disable network/login:rlogin     # svcadm disable
network/rexec     # svcadm disable network/