>I'm not sure what the "right" answer to this is... not retransmit? >remember all the ctime/cusec pairs? Make sure you generate a new ctime/cusec pair for the auth context, I'd think (I remember there was special-case code in the MIT implementation for the Mac that made sure this worked). --Ken