Our institution uses "Shibboleth" for off campus authentication, since it keeps the AD (and thus kerberos) servers hidden behind a firewall. Does anyone know how to have OpenAFS use Shibboleth for authentication? John