>> Is it possible to get tokens with aklog when on a NAT:ed machine? I have >> no problem getting krb5-tickets though. > >heimdal has an "--no-addr" option. I hope your aklog has something similar. But that's not a feature of aklog ... that should be a feature of whatever gets your Kerberos ticket. --Ken