>Did you try with following Kerberos configuration : > >default_tkt_enctypes = des-cbc-md5 >default_tgs_enctypes = des-cbc-md5 Just as a followup ... the developer tried this, and everything Kerberos related broke, hard (everything came back with "Encryption type not supported"). --Ken