I propose that you include Ken Hornsteins asetkey (from his afs-k5 transition package) program in arla. He seems willing to make that available to arla and it is very useful for migrating to kth-kerberos/heimdal. Cheers Leif