Is it possible to give ticket life time to kadmin as a option, when one need to process many houndreds of principals as admin? The script runs now for a while in batch, and then kadmin asks for password for each and every principal it process. Only way to stop is to kill the shell. Boring workaround: split the infile. //Christer J