On Fri, 2011-07-22 at 18:10 -0400, Nico Williams wrote: > Why are you not using the GSS-API? Chris started out by asking about user-to-user auth, so I didn't redirect him to GSSAPI since, as far as I know, GSSAPI doesn't have a story there (for the krb5 mech, at least).