You may want to read the thread about PGSSAPI in kitten at ietf.org. In particular it just struck me that we can associate extra state with the OM_uint32 *minor_status argument that is present on every GSS call. This is particularly useful for pseudo-mechs with dynamically determined, composite minor status codes, like SPNEGO. Nico --