Hi. It looks like there is nothing in the umich patches on the umich website that can cause this. I'd like to get a copy of the src/kdc/do_as_req.c and src/kdc/kdc_preauth.c from your KDC sources with all patches applied. --Sam