>> As for whether or not it can be ignored ... well, it works, doesn't it? :-) >> Unless you need V4, you can ignore it. > > can't you turn off login's attempt at 5-to-4 in krb5.conf? You can, I just don't recall what the option is. --Ken