On 05/10/2012, at 10:35 AM, Simo Sorce <simo at redhat.com> wrote: > Well in theory no, in practice I currently only really support the > kerberos mechanism for practical reasons. So something like SPNEGO still runs in the client's address space? -- Luke