Hi folks, I found this Mike Dopheide's patch from March 2007: http://www.mail-archive.com/kerberos@mit.edu/msg12048.html I wonder what happened to it, is there some security risk involved? What is the prefered way to delegate administration to subdomains for host principals? thanks Matej Zagiba