Re: aname_to_locaname vs gssapi svc/host.domain.org@REALM

I'll tell you what I would find acceptable:

 - a patch to add an aname2lname plugin
    - one or more plugins that implement a deterministic DB and/or
rule-set plugin
   (I'm working on this among other things, actually, so if you're
willing to wait a bit...)
 - a patch to add a kuserok plugin
    - one or more plugins that implement LDAP lookups, any sort of DB, ...
 - a patch to place keytabs for *client* (initiator) usage somewhere
in /var (which I think was part of your patches)

I'd also be OK with patchs to add a new version of aname2lname that
takes a DB argument (so that apps that want to have per-share mappings
or whatever can).

I'd also be OK with a utility that takes a gss_name_t and makes the
current process' (or thread's, on Windows, for example) credentials
match whatever process credentials are appropriate for that principal.

Nico
--