>>>>> "Eugeny" == Eugeny S Mints <Eugeny.Mints at oktet.ru> writes: Eugeny> So how really krb5_get_init_creds() handles Eugeny> preauthentication? Sorry if I miss something. If the KDC returns some preauthentication information, then the get_init_creds API will attempt to deal with that.