It is possible to use a separate keytab for each service with libsasl2-modules-gssapi-mit. One way is by setting the environment variable KRB5_KTNAME. For example, in order to get cyrus-imapd-2.2 to use its own keytab, add the following line to /etc/default/cyrus-2.2:
export KRB5_KTNAME=/etc/imapd.keytab --Mike -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]