> perform kerberos server discovery (RFC2052) on server.bar.com > -> usually something.bar.com (depends on DNS entries) Be careful ... aklog doesn't know anything about RFC2052; it just calls a Kerberos library function. What that does depends on your Kerberos implementation. --Ken