/System/Library/PrivateFrameworks/Heimdal.framework/Helpers/kadmind kadmind listens for requests for changes to the Kerberos database and performs these, subject to permissions. When starting, if stdin is a socket it assumes that it has been started by inetd, otherwise it behaves as a daemon, forking processes for each new connection.
The binary is a part of Heimdal private framework.