Kerberos 5 and NAT

[Steven McElwee]

Hi,
	We are running a firewall that is using one set of ip addresses 
for our system internally and another set is presented externally, i.e.,
NAT. How can we teach a given system to incoporate its external ip address
(note- not that assigned to its ethernet interface) in its kerberos TGT
ticket file? What are our options and what are the strengths and
weaknesses.
        Please send a response to steven at duke.edu and tmanino at duke.edu
as my news reader is very, very poorly configured.

thanks in advance,
Steven McElwee, Duke University