>>>>> "kenh@cmf" == kenh@cmf nrl navy mil via RT <rt-comment@krbdev.mit.edu> writes:

    >> I'm a bit concerned because I believe that allow dup skey is
    >> the default.  I'm not sure that the behavior people expect when
    >> they turn off allow_svr is to enable user2user.
    >> 
    >> I'd be interested in other comments on this.

    kenh@cmf> FWIW, I think people expect U2U to work all of the time
    kenh@cmf> (while I think that there may be some reason I can't
    kenh@cmf> imagine for people to want to turn it off, all of the
    kenh@cmf> ones I'm aware of are inadvertent because they turned
    kenh@cmf> off allow_svr on user principals).  And as I read
    kenh@cmf> things, allow_svr is off by default.

I'm thinking of cases where the principal is partially or fully
disabled.