There haven't really been any significant changes in krb5 between 1.2.x versions. Can you profile it and see where time is spent?