> What would be really useful here is to implement S4U2Self, in our KDC > (needed anyway) and in winbind. Once we get things worked out in > Samba4's winbind, modulo challenges in Kerberos APIs, I'm sure the > Samba3 folks will be able to port it in. This call asks for a PAC for a FYI, MIT just shipped 1.8 with S4U2Self support. -- Luke