>> I sure hope your Kerberos implementation includes a replay cache ... if it >> does, then this can't happen. > >To quote from Heimdal's TODO: >"the replay cache is, in its current state, not very useful" That's rather suboptimal ... since that affects every application using Kerberos. Sigh. --Ken