So, krb5_kt_resolve doesn't actually open the keytab, it defers the open and just gets the ops set up. What's the best way to see if it's really there and valid? It looks like I have to krb5_kt_start_seq_get/krb5_kt_end_seq_get to actually get it opened? I could just stat() the file, but that seems cheesy. Chris