Hi, Assuming I implement a Kerberos Subauth package, does anybody know how it's called by a logon application? It's easy for MSV1_0, where the MSV1_0_LM20_LOGON structure contains a ParameterControl field which gets the subauthentication ID in the upper 8 bit. But I can't find any documentation which describes how to tell a LsaLogonUser to use subauthentication with a kerberos logon. Is there a special structure for this, maybe? Corinna -- Corinna Vinschen Cygwin Project Co-Leader Red Hat