Is there any definitive source of KDC_ERR_CLIENT_NOT_TRUSTED ... in the documents it mentions these two vague ones (really, just 1 w/ an example): * Policy * OID for Login not present I'm primarily interested in information related to using Hiemdal w/ PKINIT to login into Windows 2003 Server.....