On Mon, 2008-12-15 at 23:47 -0700, Joseph L. Casale wrote: > When you use kinit to acquire a Kerberos ticket prior to > joining a Win2k3 domain with net ads join -U <upn> is that > ticket merely used for the join that follows? When it expires > does this mean anything? You use kinit before joining the AD to test AD auth. That is, you want to be sure your "linux" side is configured properly to get a kerberos ticket in the first place. If you're able to get one, you should be to join the domain. HTH, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.27.7-53.fc9.x86_64 x86_64 GNU/Linux 21:46:24 up 6 days, 2:15, 13 users, load average: 0.61, 0.73, 0.63