I don't know of any open source Java kadm5 library. Solaris has rpcgen input for a protocol similar to ours. so if you can get gss oncrpc in java it shouldn't be too horrible. One problem is that our kadmind expects you to be able to present a ticket with the initial flag set. --Sam