>We should probably set some default flags, at least: Sorry, that should be GSS_C_MUTUAL_FLAG | GSS_C_REPLAY_FLAG | GSS_C_SEQUENCE_FLAG. We can't assume anything about confidentiality/integrity protection, because the acceptor may choose to enable confidentiality/integrity based on ret_flags. -- Luke --