Thanks Tapan! To avoid any interuption to the Kerberos authentication, I am hoping to be able to first create the new keytab with new password before actually applying the new password to the SPN account in Active Directory. I do not have command line access so have to coordinate this with another team but will post results.
Stephen Brewer