/System/Library/PrivateFrameworks/Heimdal.framework/Helpers/kdc kdc serves requests for tickets. When it starts, it first checks the flags passed, any options that are not specified with a command line flag are taken from a config file, or from a default compiled-in value.
The binary is a part of Heimdal private framework.