On Thu, Oct 02, 2008 at 05:50:44PM +0200, Mark Phalan wrote: > On Thu, 2008-10-02 at 10:29 -0500, Nicolas Williams wrote: > > So it has to be done at realm-join time. OpenSolaris has a ralm-join > > facility, but MIT krb5 does not. > > But only be when joining an AD realm ? No, when joining any realm.