Hi there, On Tue, 3 Jun 2008 06:02:01 -0700 rcsheets@picosecond.org (Robert C. Sheets) wrote: > How do I disable a principal, so that it cannot authenticate. For > example, let's say I discover that a password has been compromised. > What's the best way to disable the principal temporarily? I use kadmin mod -a disallow-all-tix principal -- Björn Sandell <biorn@chalmers.se>