>are your kerberos kdcs running on the afs database servers? If not, are you = > >sure you shut down your kaservers? > >if a unix client uses kerberos v4 (kinit -4; aklog), does it fail also? Did someone add v4 support to aklog when I wasn't looking? :-) (I'm talking about the one shipped with OpenAFS, of course). --Ken