Properly scope per-request preauth data It should be possible to successfully use multiple initial credentials contexts with the same library context. Create a new internal type krb5_preauth_req_context containing per-request preauth state, including the clpreauth modreq handles and the list of preauth types already tried. Remove this state from clpreauth_handle and krb5_preauth_context. https://github.com/krb5/krb5/commit/b061f419cfc9653b7549b905e54fbbd78deea49e Author: Greg Hudson Commit: b061f419cfc9653b7549b905e54fbbd78deea49e Branch: master src/include/k5-trace.h | 3 + src/lib/krb5/krb/get_in_tkt.c | 12 +- src/lib/krb5/krb/init_creds_ctx.h | 3 + src/lib/krb5/krb/int-proto.h | 8 +- src/lib/krb5/krb/preauth2.c | 190 +++++++++++++++++++++++-------------- 5 files changed, 135 insertions(+), 81 deletions(-)