> > Okay, noted. Isn't there a way to use 3DES with [kerberos] IV? > > Nope. Kerberos IV is specifically just DES. Actually, I'm aware of some kludges developed at MIT to use 3DES with kerberos IV for KDC and service keys on a principal-by-principal basis. - Bill