Sam, Solaris has been auto-acquiring tickets with a keytab in gss_init_sec_context() for many years now -- at least since Solaris 10, so at least seven years. We've never had complaints about this. But we have needed to override some behavior at times, so I think an env var and/or an appdefault (using progname) would help here. Nico --