i installed kerberos successfully and i tested it using a client machine and it works fine although i didn't copy the keytab to the client. the question is, if there is a service running on a client machine for example LDAP , do i have to copy the server keytab to this client ? thanks Amir Saad Software Engineer