On Thu, 14 Feb 2013, Jason Edgecombe wrote: > On 02/14/2013 05:41 PM, Andrew Deason wrote: >> On Thu, 14 Feb 2013 14:02:11 -0500 (EST) >> > how does afs3-bos@host map to kerberos/GSS? would it map to > afs3-bos/host.domain.com@REALM? When interpreted as a GSS_C_NT_HOSTBASED_SERVICE, yes. (My "host" in the above is short for the FQDN, anyway.) -Ben