Ken H's response about needing [domain_realm] got me going. Thanks Ken and Sam. Sam Hartman wrote: > Can I get you to try with the comment before the first bracketed > section removed from krb5.conf? That was only added in the email.