> ret = wind_utf8ucs2(password.data, s, &len); > if (ret) { > krb5_set_error_string(context, "Password not an UCS2 string"); > > I think the error message should be more like: > > "Password is not a UTF-8 string" The string can both fail being a utf8 string and not be an ucs2 string (ucs2 doesn't support utf16's surrogate pairs). Love