In general, you should never call free() directly on an object allocated by the krb5 API. You should use the appropriate krb5 API free function instead. ---Tom