> Hi,
>
> I have a question regarding enabling kerberos pre-authentication on


> [realms]
> NEVISTEST.COM = {
> require-preauth = yes
> default_principal_flags = +preauth


I've never heard of 'require-preauth = yes' as a config file option.
Setting 'default_principal_flags' only effects principals you create
when it is in effect -- it doesn't touch existing principals -- you
will need to use the modprinc command of the kadmin program to set
the requires_preauth flag on any existing principals.

John