On Thu, 2003-02-06 at 10:08, Luke Howard wrote: > Also, it's possible that a service that does not use the > authorisation data will use some other out-of-band means > to determine a principal's authorisation information, > which could involve accessing a network directory service. AFS does this, for one example. -- Ben