>Also (some can correct me if I'm wrong) a user accessing files under >DFS
>doesn't inherit the machine's principal, do they? If they don't then
>DFS is nothing like AFS's IP scheme no matter how you look at it.
Yes, I should have realized this. This is correct. You don't pick up
membership in a group by being from an IP host, it is just that the IP
host has a principal identity. But if you're authenticated as yourself,
then there's no additional authenticated identity indicating what
machine you're using.
Mike