Ken Raeburn wrote: > You should be able to use kadmin.local to create them. It'll go > through the KDC database layer and contact the LDAP server directly, > and should (like kadmind) be set up to have write access to the > appropriate LDAP data. That's what I needed! Thanks! :-) Best regards, Thomas