>>>>> "Markus" == Markus Moeller <huaraz at btinternet.com> writes: Markus> Will this create problems if the key version number gets Markus> bigger than 255 ?? Yes although not as many as you might expect. The code at least in MIT Kerberos beyond 1.3 treats the kvno as mod 255 and tries to make things work.