On Wed, Jun 21, 2006 at 11:18:06AM -0700, Salil Dangi wrote: > How do you match two names that have different name-type attributes (UNKNOWN > and NT_PRINCIPAL)? You ignore the name-type. Kerberos' name types do not partition the principal namespace and are entirely advisory. Nico --