>>>>> "kwc" == The RT System itself via RT writes: kwc> krb5_gss_canonicalize_name() returns the result of gss_duplicate_name(). kwc> In a multi-mechanism mechglue environment, this winds up calling back kwc> through the glue layer instead of calling krb5_gss_duplicate_name() kwc> directly. In this case, a krb5_principal pointer is interpreted kwc> as a gss_union_name_t pointer in the glue layer. krb5_gss_canonicalize_name() is not called by the mechglue layer. It is also not a public function. I'm not sure we can support calling the krb5 mechanism gssapi functions by their krb5_gss_* names rather than through the mechglue layer (using specified C-bindings entry points) now that mechglue is integrated. Perhaps we should just delete the file where we define krb5_gss_canonicalize_name(). ---Tom