addprinc -randkey host/earth.example.com@EXAMPLE.COM ktadd -k earth.key host/earth.example.com change hostname of earth to earth.example.com scp earth.key to earth shred earth.key -remove login to earth and mv earth.key to /etc/krb5.keytab chown reboot earth toshiba - had to remove the local account earth, moon - had to ensure that /etc/hosts does not list hostnames moon - can login via gdm using kerberos, but cannot SSH back in - time sync off!