> There is no advantage and attempting to obtain a value that high should > not be attempted. There are bugs in some Kerberos distributions when > the kvno is greater than 255. Oopsie. Thanks Jeff! So please do NOT follow my advice then. But choose the number so that you don't interfere if you want to rekey afs@REALM by doing a kvno+1. What about 129 then? Harald.