I said it now complains: [ Kerberos V5 refuses authentication because krb5_sock_to_principal failed ] I presume this is because there is currently no reverse mapping for this machine in the DNS. Will try to get that sorted (The problems of testing in someone else's setup). cheers mark