>The original comment in the code said something about >needing a UPN to be able to a 'kinit -k' but I'm not >sure I believe that. I thought the sAMAccountName >would work but I haven't dug into this issue yet. You don't need one to do an AS-REQ -- you can just use sAMAccountName. -- Luke --