> > /* S4U2PROXY */ > OM_uint32 > gss_acquire_cred_with_creds( Could you argue that it would be better to do away with this function, and allow the "delegated" credential handle to be passed directly into gss_init_sec_context()? Or would this introduce problems for other mechanisms? -- Luke