Hello Henry 2009/8/6 Henry B. Hotz <hotz@xxxxxxxxxxxx>: > Or get a host principal keytab for the machine (the preferred solution). What do you mean with this? As I posted the Kerberos5 authentication works as expected. This means for me /etc/krb5.keytab is correct (it's exported from one of our domain controllers, as recommended from Microsoft). Regards, -- Martin Schweizer schweizer.martin@xxxxxxxxx Tel.: +41 32 512 48 54 (VoIP) Fax: +1 619 3300587