>>>>> "Kevin" == Kevin Coffman <kwc at citi.umich.edu> writes: Kevin> Is the intent of this routine to, by default, return saying Kevin> successful verification if a keytab entry cannot be found? No the intent is to follow whatever is specified in krb5.conf. The default for the krb5.conf option is in fact to succeed if no keytab entry is found.