I am trying to create a simple NAL application to be accessed via NAL web
based interface (from VO) which will fire up a TS desktop. The TS has the
NW client installed on it.

Is there any way of getting the full credentials passed through?

The only way I can see to do a "seamless" login is to force the client on
the TS to look at only one context in the tree and then create aliases to
accounts in that context.

It would seem that I need something on the TS to trigger an LDAP
contextless look up in some way.

Any ideas gratefully recieved.