Sam Hartman wrote: > What I'd expect to happen is for my outgoing request to have > gss-acceptor-realm-name and trust-router-coi attributes set. You're updating the wrong list. update proxy-request { ... } Alan DeKok.