Thanks for all the replies. They have been very helpful in understanding the issues. So, is the idea to be able to have SSSD (or some other component) implement an authdata plugin to set username/uid attribute(s) and have the first class GSS APIs that will get the username & uid info from the attribute(s) under the hood? Thanks, - Danilo