> BTW, how does one create a new principal that is associated with a user > object entry? add_principal -x userdn=<FDN of user object> <principal name> -Rahul S.