when kerberos_kinit_password_ext() is called, it passes NULL as the prompter_data, where it could pass the same password it also passed to krb5_get_init_creds_password(). This is needed by the pkinit kerberos preauth method when used via pam_winbind, as it is difficult to get the password saved previously in the pam stack otherwise.
Created attachment 2467 [details] pass password to kerb_prompter()
Looks good - applied. Thanks ! Jeremy.