diff --git a/src/cmd/initContainer.go b/src/cmd/initContainer.go
index b3a7bd983..d92082b40 100644
--- a/src/cmd/initContainer.go
+++ b/src/cmd/initContainer.go
@@ -565,6 +565,16 @@ func configureKerberos() error {
 		return nil
 	}
 
+	kcmSocketEnabled, err := utils.IsKCMSocketEnabled()
+	if err != nil {
+		return fmt.Errorf("failed to check if kcm socket is enabled: %w", err)
+	}
+	if !kcmSocketEnabled {
+		logrus.Debugf("%s: kcm socket not enabled", logPrefix)
+		logrus.Debugf("%s: skipping", logPrefix)
+		return nil
+	}
+
 	var builder strings.Builder
 	builder.WriteString("# Written by Toolbx\n")
 	builder.WriteString("# https://containertoolbx.org/\n")
diff --git a/src/pkg/utils/utils.go b/src/pkg/utils/utils.go
index f3de23b1b..06070a3f0 100644
--- a/src/pkg/utils/utils.go
+++ b/src/pkg/utils/utils.go
@@ -17,6 +17,7 @@
 package utils
 
 import (
+	"bufio"
 	"errors"
 	"fmt"
 	"os"
@@ -892,3 +893,46 @@ func ResolveContainerAndImageNames(container, distroCLI, imageCLI, releaseCLI st
 
 	return container, image, release, nil
 }
+
+// IsKCMSocketEnabled checks if the KCM cache is enabled or not, by verifying the unix domain socket used
+// by kcm exists. Normally, the default path is - /var/run/.heim_org.h5l.kcm-socket.
+//
+// However, we should be vary that this path is configurable. It can be overridden by setting the
+// kcm_socket field in the [libdefaults] section to point to the new path, inside /etc/krb5.conf.
+func IsKCMSocketEnabled() (bool, error) {
+	kcmSocketPath := "/var/run/.heim_org.h5l.kcm-socket"
+
+	file, err := os.Open("/etc/krb5.conf")
+	if err != nil && !errors.Is(err, os.ErrNotExist) {
+		return false, err
+	} else if err == nil {
+		defer file.Close()
+
+		scanner := bufio.NewScanner(file)
+		insideLibdefaultsSection := false
+
+		for scanner.Scan() {
+			text := strings.TrimSpace(scanner.Text())
+			if strings.HasPrefix(text, "[") {
+				insideLibdefaultsSection = text == "[libdefaults]"
+				continue
+			}
+
+			if insideLibdefaultsSection {
+				parts := strings.SplitN(text, "=", 2)
+				if len(parts) == 2 && strings.TrimSpace(parts[0]) == "kcm_socket" {
+					kcmSocketPath = strings.TrimSpace(parts[1])
+				}
+			}
+		}
+	}
+
+	info, err := os.Stat(kcmSocketPath)
+	if err != nil && !errors.Is(err, os.ErrNotExist) {
+		return false, err
+	} else if errors.Is(err, os.ErrNotExist) {
+		return false, nil
+	}
+
+	return info.Mode()&os.ModeSocket != 0, nil
+}