without upgrading to Heimdal or MIT kdc (I have set up a system once like that and decided I wanted to stay with the stock kaserver)? TIA, Eric