Kerberos 1.9.1 leaks file descriptors when using the admin interface, which can result in failures when the kadmin server runs out of connections. There's a fix scheduled for 1.9.2 per the referenced mit ticket, could this be applied to 1.9.1 in portage pending the release of 1.9.2? Thanks...
+*mit-krb5-1.9.1-r1 (18 Oct 2011) + + 18 Oct 2011; Eray Aslan <eras@gentoo.org> +mit-krb5-1.9.1-r1.ebuild, + +files/mit-krb5-1.9.1-fd-leak.patch: + patch for fd leak in kadmin - bug #387485 +