>is it possible to get the TGT of an arbitrary principal >without changing it's password?
Do you mean without _knowing_ its password? Look at Microsoft's S4U2Self extensions in Windows 2003. -- Luke ~ ~ ________________________________________________ Kerberos mailing list [EMAIL PROTECTED] https://mailman.mit.edu/mailman/listinfo/kerberos
