Ahhh. Got it sorted, turned out the key set with asetkey for the afs principal was in the wrong format. (asetkey could have warned me about that though). Creating the principal from a kadmin.local -e des-cbc-crc:v4 did the trick for me. Any plans for a clean KerberosV OpenAFS? ;-) Jacob -- always always avoid redundancy