Review ofhttp://k5wiki.kerberos.org/wiki/Projects/PAC_and_principal_APIs endi ng January 10

[Jeffrey Hutzelman]

--On Wednesday, December 31, 2008 05:57:29 AM -0500 Sam Hartman 
<hartmans at MIT.EDU> wrote:

> Luke, even the KDC may not have the same default_realm as the realm it
> serves.  First, in various ways KDCs can serve multiple realms.
> Secondly, it's nice to share a krb5.conf between a KDC and a client;
> I've run into cases where a machine was a KDC in one realm but I want
> kinit to default to another.

I _run_ such a KDC.