I just set up a fresh 0.1g kdc and I simply could not get it to work. I could kinit but got "decrypt integrity check failed" when doing (say) telnet although I got all the right credentials. Then I tried it w/o master key and lo and behold it works. Did someone forget to decrypt something somewhere in the code ;-) Cheers Leif PS Yes I tried running kdc with --keyfile DS