> Maybe it would be better to put the principal name in the token > instead of the potentially completely wrong UID? Or let the fileserver tell the client how the user is, it knows. Esp if it does mapping between users in the fileserver end. Lets take all guess work out of the client. Love