What does radiusd report in the logfile? You might trying running radiusd in debug mode (add "-x -x" to the command line) and checking the messages in the radius.debug. > Trying MIT-KRB in place of AFS-KRB changes nothing. MIT-KRB will definitely fail for a real AFS Kerberos server. The format of the info in a ticket is different and you need a different passwd_to_key() function. ++ Ascend Users Mailing List ++ To unsubscribe: send unsubscribe to ascend-users-request@bungi.com To get FAQ'd: <<A HREF="http://www.nealis.net/ascend/faq">http://www.nealis.net/ascend/faq</A>> </PRE> <!--X-MsgBody-End--> <!--X-Follow-Ups--> <HR> <STRONG>Follow-Ups</STRONG>: <UL> <LI><STRONG><A HREF="msg09861.html">Re: (ASCEND) Ascend Access Control RADIUS <--> Kerberos</A></STRONG></LI> <UL> <LI><EM>From</EM>: "Matt Crawford" <crawdad@fnal.gov></LI> </UL> </UL> <!--X-Follow-Ups-End--> <!--X-References--> <!--X-References-End--> <!--X-BotPNI--> <HR> <UL> <LI>Prev by Date: <STRONG><A HREF="msg09770.html">RE: (ASCEND) P75 -> Max : CL OK c=47?</A></STRONG> </LI> <LI>Next by Date: <STRONG><A HREF="msg09763.html">(ASCEND) pcAnywhere/MAX fix?</A></STRONG> </LI> <LI>Prev by thread: <STRONG><A HREF="msg09764.html">Re: (ASCEND) Ascend Access Control RADIUS <--> Kerberos</A></STRONG> </LI> <LI>Next by thread: <STRONG><A HREF="msg09861.html">Re: (ASCEND) Ascend Access Control RADIUS <--> Kerberos</A></STRONG> </LI> <LI>Index(es): <UL> <LI><A HREF="mail11.html#09765"><STRONG>Main</STRONG></A></LI> <LI><A HREF="thrd206.html#09765"><STRONG>Thread</STRONG></A></LI> </UL> </LI> </UL> <!--X-BotPNI-End--> <!--X-User-Footer--> <!--X-User-Footer-End--> </BODY> </HTML>