>It seems as though, number 1 may be happening... > >I had: > > default_principal_flags = +preauth >which I changed to: > default_principal_flags = -preauth > >Is this correct, or will this result in krb5 losing preauth? Uh, that shouldn't matter at all (krb5 preauth doesn't affect AFS). Did you read $(krb5src)/krb524/README? Was it unclear? --Ken