separate kdc to authenticate a single user

[peter sands]

Hi,

Currently have kerberos running ( mit). All OK. but just found out
that a web service currently running of one of our clients wants to
use kerberos to authenticated against their own KDC server and not our
default one.

Do I just put in another entry in the realms section for their kdc, or
do I need to
setup cross-realm .

Not to sure what to do

Thanks
Pete