On Tue, Feb 08, 2011 at 09:36:48AM +1100, Jean-Yves Avenard wrote: > At this stage I'm only interested to pass the authentication phase ; > for authorisation I have a plan already (using ldap) You have a solution for mapping kerberos identity to system username via ldap? If so I'd be very interested to see it. Regards, Brian.