One of the new features of Mozilla 1.7 touted in the release notes is: "Support for Kerberos HTTP authentication using GSSAPI (benefits Unix-like platforms including Linux and OS X)." Single sign on rules. Whats needed is the addition of --with-gssapi in the spec along with adding krb5-devel to the BuildReq line. I've filed a request in bugzilla. mod_auth_kerb (http://modauthkerb.sourceforge.net/) for Apache makes a nice companion to this. Dax Kelson Guru Labs