>Thanks Ken and Alexander for the information. Alexander, could you >please let me know which file in the kvno utility source code has the >S4U2proxy implementation using raw Kerberos5 API? There is literally only one file for kvno, "kvno.c". Look at what the the "proxy" (-P) flag does. --Ken