The OpenAFS client for windows expects the DB-servers to respond to kerberosrequests(\*), which is not the case if you run for ex. a MIT or heimdal KDC on separate mashines. The krb-forward utility is installed on the DB-servers and acts as a proxy to the real KDC's. You can get it from my CVS-repo here. checkout the source like this (you need -R patch to your cvs): cvs -R -d /afs/e.kth.se/src/SourceRepository co s3/krb-forward the source builds on Linux, Digital UNIX and Solaris. The program was written by Love H�rnquist �strand (\*) This is not true when MIT Kerberos for Windows is installed on the machine. In that case, the Kerberos libraries look for the MIT or Heimdal KDC independent of the CellServDB entries. -- Jimmy Engelbrecht - 06 May 2004