Hi, Jason made a change that stopped trying to do kerberos 5 authentication unless there is a krb5.conf file. Should a similar change be made for kerberos IV ? Currently "su" always complains about failing kerberosIV authentication before prompting for the local password. cheers mark