It just works. And I've so far found that it is best to put as little into krb5.conf as possible concerning ADS realms, because ADS sets up SRV RRs which the MIT clients have no trouble using to locate the KDCs. -- Mark H. Wood, Lead System Programmer mwood at IUPUI.Edu MS Windows *is* user-friendly, but only for certain values of "user".