You definitely want to be using krb5_get_init_creds_password. I think the problem has to do with how you are setting up the credentials cache, not with your tty configuration.