fix kerberos