The kdc doesn't appear to syslog unknown principals. Am I missing something here? Does it log any errors?