It seems I am missing some parts for setting up samba with Kerberos support. I can successfully connect with smbclient -k to a Windows XP,2003 server. But when I run smbd with security = ADS realm = MYREALM.COM and a working krb5.conf. ( kerberised telnet/ftp/etc works) I get an error message on Windows XP/2003. Also if I try to connect with smbclient -k .... I get NT_STATUS_LOGON_FAILURE and the server finishes with Doing spnego session setup NativeOS=[Unix] NativeLanMan=[Samba] Got OID 1 2 840 48018 1 2 2 Got OID 1 3 6 1 4 1 311 2 2 10 Got secblob of size 1660 failed to fetch machine password Failed to verify incoming ticket! error string = File exists error packet at smbd/sesssetup.c(177) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE created /tmp/SMBsesssetupX.78.resp len 39 Where does the "failed to fetch machine password" error come from ? A trace of the server doesn't show any attempt of reading krb5.conf nor krb5.keytab. Any help is appreciated. Thanks Markus