If you plan to muck with the krb5_data structure - how about declaring it to contain unsigned char's... If we do that - we may want a different krb5_general_string type. Or instead of unsigned char *, how about a void *? Ezra