/usr/libexec/checkLocalKDC
checkLocalKDC checks the integrity of a LocalKDC and its principals. The script is non-destructive and can be run multiple times.