Sorry i added far too much there. here is a slightly less when i grep for my name [root@ipa011 ~]# tail -f /var/log/krb5kdc.log | grep nicholas May 23 10:55:47 ipa011.ad.companyx.fm krb5kdc[4304](info): AS_REQ (4 etypes {aes256-cts-hmac-sha1-96(18), aes256-cts-hmac-sha384-192(20), aes128-cts-hmac-sha256-128(19), aes128-cts-hmac-sha1-96(17)}) 10.32.225.7: NEEDED_PREAUTH: nicholas.cross(a)AD.companyx.FM for krbtgt/ AD.companyx.FM(a)AD.companyx.FM, Additional pre-authentication required May 23 10:55:56 ipa011.ad.companyx.fm krb5kdc[4304](info): AS_REQ (4 etypes {aes256-cts-hmac-sha1-96(18), aes256-cts-hmac-sha384-192(20), aes128-cts-hmac-sha256-128(19), aes128-cts-hmac-sha1-96(17)}) 10.32.225.7: HANDLE_AUTHDATA: nicholas.cross(a)AD.companyx.FM for krbtgt/ AD.companyx.FM(a)AD.companyx.FM, No such file or directory I'm guessing it's this? nicholas.cross(a)AD.companyx.FM for krbtgt/AD.companyx.FM(a)AD.companyx.FM, No such file or directory