Thanks for the response! James J. Barlow wrote: > Any reason you wouldn't want to run it on a KDC?
Good question! It is purely a matter of preference for me, as this code will be part of my larger set of "provisioning" code, which I prefer to run on a separate application server. I'm sure I could move this module to the KDC, and establish some sort of communication channel (via SSH or some-such), but it would be less work for me to simply use my PoC "kadmin -q listprincs ... | foreach princ kadmin -q getprinc -terse $princ ... | awk {print ... " remotely, and deal with the 90 minutes it takes to run. Thank you again -- any further thoughts and comments are certainly welcome, -Matt Matthew J. Smith [EMAIL PROTECTED] University of Connecticut ITS ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos