It seems to me that one ought to be able to construct a krb5_creds struct given a keytab (and the princ name you want from it)? [probably re-inventing a number of wheels due to non-publically visible functions] Is this correct? John