> Is it possible that a single service kerberized with heimdal's > libgssapi > can accept service tickets of two separate realms? There is no trust > between both realms. Yes, but you must not give the gss_accept_sec_context a credential an check the name afterward (the later you should do anyway). Love