Hi, I added a couple of methods to extract a keytab for the purpose of decrypting packets with wireshark. The offline method is on a "works for me" basis (I actually had to do this today) - dunno whether it generally works, would appreciate if the Kerberos gurus have a look. https://wiki.samba.org/index.php/Keytab_Extraction Thanks, Uri.