The hotfix for my KDC issue has been publicly released. http://support.microsoft.com/kb/951191 -Ross > * Authentication to Active Directory using a principal that contains a > slash (such as service/foo) from a keytab generated by the Windows > tool is broken in Windows 2008.