PKINIT seems to only work using MacOSX kinit (/usr/bin/kinit) when the argument "--pk-use-enckey" is also passed. There does not seem to be a corresponding krb5.conf setting for this argument. Does anyone know a MacOSX krb5.conf setting that will do the same thing as --pk-use-enckey? The KDC is a 1-10-3 MIT KDC. Glenn