krb5_rd_cred() ?

[Ken Hornstein]

>I have been looking for the correct function to call when doing a 
>KRB5KRB_AP_ERR_SKEW check.  As of yet I believe the krb5_rd_cred() 
>function is what I am looking for.

Silly question time; what's an KRB5KRB_AP_ERR_SKEW check?

If you are interested in checking an authenticator to see if it's
within the clock skew, that's done for you automatically when you
process a Kerberos message (which is probably done by krb5_rd_req(), or
something that calls it).

--Ken