On 13/07/12 14:20, Quinn Plattel wrote: Does this mean that nslcd must be configured for kerberos on both > the client and the server side? > Yes. nss-ldapd/nslcd must be running at both client and server ends. To save time, we made a usb memory stick with a script to copy the keytab, nslcd.conf and nsswitch.conf for new Linux clients. Cheers, Steve