You do not need to rely on port 464 as far as I know. kadmind will listen on the kadmind_port and kpasswd_port stanzas from kdc.conf. For the client - you can specify kpasswd_server - with a port number - in krb5.conf. In fact - the dejagnu test suite does this already.... Ezra