On 11/03/2009, at 9:24 PM, Sam Hartman wrote: > I'd definitely prefer some sort of extended API. > I wonder what it should give you back though. > An auth_context? > Is that good enough? Just the auth_context? You can't get the ticket principal out of that. It could give back everything rd_req does. -- Luke