IBM Security Access Manager (ISAM) supports Kerberos constrained delegation single sign-on (SSO) for users in multiple Windows domains – in other words, ISAM is able to talk to Active Directory to obtain a Kerberos credential on behalf of a user, which it then presents to

I’m hoping to include various snippets of technical information that will be of use to people, either related to my work (as a Security Specialist with IBM) or else related to my hobby projects (such as MythTV). So here goes with a fairly trivial point, but