>> * Is the client's IP address available in a preauth plugin? > > It doesn't look like it. My KDC preauth plugin wants to connect back to a service on the client host. So I guess I'm screwed as far as making this a KDC-side-only plugin?