Actually, Nico, can telnet or rlogin replay against gssapi? I don't think the authenticator will work. rlogin wants a checksum of encryption state and some other stuff. GSS wants an 8003 checksum. --Sam