kadmin can't use TGT based?

[Mark Roach]

Hi, I'm fairly new to Kerberos. I want to verify that I understand this
item correctly: Is it true that you can not use a TGT based ticket to
connect to the kadmin server? (And just to be extra clear) This means that
any application that uses the kadm5clnt library must prompt for a password
and use kadm5_init_with_password in order to connect successfully, right?

If that is the case, what is the purpose of kadm5_init_with_creds?

Thanks,

Mark Roach