Right now, the gssapi library from MIT krb5 will use a keytab value set from register_acceptor_identity in acquire_cred and not just in accept_sec_context, while Heimdal does only the latter. This is biting me in the behind to the extent that I have a local patch for it. Is there any intent to change how Heimdal's gss library behaves? -D