> I imagine this is the consequence of having the authentication done by > krb5 KDCs instead of the kaservers. I'm following two paths to solve the > problem, all advice welcome. Use the kpasswd supplied with your krb5 KDC. You may have to port it to the windows environment though. Harald.