programatic translation of authentication names to local names

[Owen O'Malley]

We're adding Kerberos security to Apache Hadoop (hadoop.apache.org),  
which is an open source petabyte-scale distributed file system and  
MapReduce implementation.  Since MapReduce includes running  
distributed jobs, we need to map the authenticated names to local OS  
names. Within Kerberos this seems to be done by  
krb5_aname_to_localname. Unfortunately, that method doesn't seem to be  
exported via a public API or a CLI tool. Since Hadoop is in Java, the  
easiest thing to do is re-implement the method, but that seems  
unfortunate. Can anyone suggest a better path?

Thanks,
    Owen