While playing around I noticed this pattern occasionally. I was wondering if 'srchost=*' should be treated as NULL (use gethostname) or to just skip the loop where we call krb5_kt_get_entry() since that won't match with an asterisk. Thanks, Doug