Hi, Is it somehow possible to restrict a principal (real user) to obtain only certain service tickets like HTTP but not ftp with MIT Kerberos on CentOS 5.2? Thanks --lars