On Mon, 2011-03-14 at 16:28 -0400, Guilherme Nery wrote: > Does "krb5_get_init_creds_password()" function auto-checks the TGT returned > to ensure if kdc is authentic? No, you need to call krb5_verify_init_creds() to do that.