Is there a way for the user (not the admin) to figure out when the principal or password is due for expiration, prior to when kinit warns for that. If not, why not? Here I presume that the user has a valid login at the time when the test is run. Is someone aware of a X11 login dialog (with PAM?) for Linux that handles expiration warning? Harald.