There's an AD code sample distributed by Microsoft which implements this, but it wants to build against MIT krb5. I want to build against Heimdal. It shouldn't be that hard to write, but I don't see any point in doing it if someone else already has. Has anyone? -D