As a part of our seemingly endless path to eliminating KRB4 I was thinking I'd like to replace or modify krb524d to just log the request and always return an error (KRB524_KRB4_DISABLED seems ideal, but as near as I can tell it only is used in the client code). Has anyone gone down this path before? Thanks, John