> Well, keytab contains the key[s] (which may have been derived from > user's secret) so AFAI understand they are password equivalent. > > Regards, > Isaac B. agreed, hence my "less insecure" notion, but those Risk Management types can check their check box about passwords not being stored in the clear on the file system.