GSS-API - Kerberos Ticket

[Eitan]

Hello,

Is there any method of "extracting" the Kerberos key from a GSS ticket?

Microsoft sends the Kerberos ticket (SPNEGO over http) using the GSS
methods. If one attempts to handle the internal Kerberos ticket
information (such as the case of the PAC data) he will have to use the
Kerberos ticket.

Any idea?
Any explicit function I've missed ? such as
gss_extract_krb5_ticket()..?

Eitan.