On 12/01/2013 06:59 PM, Markus Moeller wrote: > krb5_get_init_creds_opt_alloc(kparam.context, &options)) > krb5_get_init_creds_opt_init(options); Don't call krb5_get_init_creds_opt_init(). It's a deprecated function, and by calling it you're zeroing out the flag which remembers that there is memory allocated for extended options.