I'm going back to my alma mater, Iowa State University, tomorrow, along with a couple of co-workers. We're going down there to look at their Kerberos implementation, because we'd like to use something similar here to tie our Active Directory to our ancient OpenVMS system that hosts the e-mail system for the campus. ISU has been using Kerberos for a long time, and hopefully we'll learn something. If I have time, maybe I'll stop in to harass John for a bit.