Hi. The patch to try all mechanisms and return success if any of them return success produces bad error in case of failure. If you acquire acceptor credentials with no dynamic mechanisms and with no keytab, you get a GSS_FAILURE with no useful minor status. --Sam