Read the proposal here: http://k5wiki.kerberos.org/wiki/Projects/NAPTR The main feature is to enable discovery of MS-KKDCP proxies. But it also has side benefits of giving admins greater control over client behavior. Nathaniel