>Isn't one of the issues there that Apple pretty well broke Kerberos on Lion >by replacing it with an eviscerated Heimdal missing most of the useful >stuff? That's a completely different problem, but not relevant here. --Ken