On Tue, 2004-05-11 at 10:26, Chris Ricker wrote: > I'm well aware of how it works. I'm also aware that it doesn't solve the > problem of wanting to work disconnected. Kerberos ticket caching still > requires initial connectivity. It also does nothing for LDAP, NIS, etc. > You'd need a totally new ad-hoc caching mechanism above and beyond the krb > ticket cache, and I don't think it would turn out to be something any sane > organization would want.... Local accounts, OTOH, are an access control > mechanism that is at least well-understood, which is why our standard is to > fall back to them if distributed is unavailable. What does Windows do for laptops? Havoc