Does it make sense to do gss_acquire_cred with GSS_KRB5_MECHANISM and then gss_init_sec_context with that cred and GSS_SPNEGO_MECHANISM? If you do that with mechglue-branch the cred is basically ignored because mechglue/g_glue.c:__gss_get_mechanism_cred tries and fails for find a mechanism specific internal credential. Can anyone recommend a "fix". Mike