krb5_c_encrypt sets the kvno of ciphertext to 0. So fill it in after the call to encrypt_tkt_part. http://src.mit.edu/fisheye/changelog/krb5/?cs=21815 Commit By: hartmans Revision: 21815 Changed Files: U trunk/src/kdc/do_tgs_req.c