Updated id-kerberos association