I found a message in a debian list which answer most of my questions: http://mailman.mit.edu/pipermail/krbdev/2005-November/003941.html It doesn't respond to the one about the point of view of the application using the library, but I'll investigate more. -- Pat