hi, i find kadmind try to open the file of acl called "ldap:ou=KerberosPrincpals,.... " it is correct ? bye manfred