>Today, applications have their own configuration files. That is where >their Kerberos configuration information should be stored. My only comment: the applications I distribute today on Unix systems to users don't have their own configuration files, and I don't see a practical alternative to [appdefaults]. --Ken