You could try one of the commercial products such as VAS (Quest) or
DirectControl (Centrify). I believe they both have quite good support
for multiple domains.

-- Luke

--
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos