Hi guys, I have the following situation on my network... I have an Openldap server working as well, and it stores all my users informations... I configure a Kerberos server to use this openldap as a backend... We would like to implement an Single Sign On to our "web intranet" using kerberos tickets... The user will authenticates onto a freeradius server, it will refer to external source kerberos, and kerberos will be configured with openldap backend (the openldap server that i have). Is it possible??? Instead of freeradius directly authenticates to ldap, it would pass by kerberos, and kerberos communicates with openldap... if userame/passwork ok, the user will be authenticated and receive a kerberos's ticket... And my clients are mostly windows... Is it possible with this scenario that I want, windows clients get kerberos tickets to make a Single Sign On, on my web intranet? Regards, Thiago