Hello, I think I've found a memory leak in gss_add_cred_with_password, in krb5 1.12.1 and 1.13.1. The gss_OID_set target_mechs in gss_add_cred_with_password (lib/gssapi/mechglue/g_acquire_cred_with_pw.c) is not released if the function returns GSS_S_COMPLETE. Sorin