On Thu, 2011-01-13 at 08:02 -0500, Peter Mogensen wrote: > But is it possible to have principals containing "@" ? > Something like: user at domain@REALM Yes. The unparsed representation of such a principal is user\@domain at REALM.