Well, I've declared defeat, at least for the moment. I can't get kerberos to talk nicely with the Win2k DC. Not being an expert on NT4 networks, can I just simply have the Samba box on the Win2k network just as a standard Lanman-style box, without Active Directory? -- A. Clausen techlists at alberni.net