Maybe you can do it with Krb5::Kadm5 (or maybe I have just misread your question, or even failed to implement this :-) Try and let me know. Cheers Leif