> > Just to eradicate my last hope, there isn't a way to use Transforms with > RemoteUser, right? > > I want to strip the @REALM from what we get from REMOTE_USER. > Is this by any chance a REMOTE_USER from Apache's auth_kerb? If so you can strip it with KrbLocalUserMapping on Jim