>I am not using kerberos (yet), so I have to set it with kas. >Can it be set to never expire ? or is the maximum lifetime 720 hours ? Just as a note ... if you set you tickets to never expire (which I don't think is possible with the current code), you're just asking to be 0wned. Just my $0.02. --Ken