On Mar 8, 2007, at 10:20, Jim Rees wrote: > Alexander Al wrote: > > I'll tell the user : "can't" (because he is connecting from > outside.) > ...or, if he has a kerberos gss-api-ticket-passing enabled ssh on his end, he can kinit to your realm and make the magic happen ;) -rob Robert Banz Coordinator, Core Systems banz@umbc.edu