I believe this implementation is complete except that it does not deal with get_in_tkt. We cannot ignore get_in_tkt because it used by ksu and kadmin within our tree. We probably do not want to change that for now. I will next look at how easy it is to merge preauth2.c and preauth.c.