Replacements for deprecated Kerberos APIs?

[Morrison, Wayne]

I'm trying to document the replacement calls for the deprecated Kerberos APIs.  Here's the list that I have so far, but I'm not sure what the proper new calls are for some of the old APIs.  Can anyone fill in the blanks?  Am I missing any?

I've tried Google, but I only get documentation on the old APIs, and not on what they should be replaced with.  The information I have so far came from discussions on the various Kerberos mailing lists.

Old API                                              New API
-----------                                              -------------
krb5_auth_con_getlocalsubkey            krb5_auth_con_getsendsubkey
krb5_auth_con_getremotesubkey         krb5_auth_con_getrecvsubkey
krb5_auth_con_initivector                     ??
krb5_get_in_tkt                                   ??
krb5_get_in_tkt_with_skey                   ??
krb5_get_in_tkt_with_password            krb5_get_init_creds_password
krb5_get_in_tkt_with_keytab                krb5_get_init_creds_keytab


Wayne Morrison, CISSP
OpenVMS Security/eBusiness Engineering
Hewlett-Packard Company
110 Spit Brook Road
Nashua, New Hampshire