So why does samba do this in the first place? Isn't this already properly handled by the internal logic in libkrb5? /Johan