By default the last part of hte host domain name in caps will be taken as your realm. how about this one : [libdefaults] default_realm = DE.COM [realms] DE.COM = { kdc = dchyd1.hyd.de.com admin_server = dchyd1.hyd.de.com } [domain_realm] hyd.de.com = DE.COM .hyd.de.com = DE.COM