>telnetd should include both the UID and the PID in the cache name. This >works much more smoothly with rpc.gssd and is what I do in pam-krb5. In a perfect world, we'd chuck the whole horrid scheme and create some utility to send the Kerberos credentials to rpc.gssd or it's equivalant. Sigh. --Ken