> We introduced a behavior change in 1.7 so that application no longer > examine the service name encoded in a ticket; instead, they look at > whether the key matches. This means that you can have KDC-side aliases Only if the service passes in GSS_C_NO_CREDENTIAL. -- Luke