Hi Jiajia, I noticed the following line and related codes in KdcRequest.
private DhClient dhClient; In my understanding, it should be only for PKINIT in DH case. Would you mind refactoring the codes and moving them to the mechanism specific scope (better to be in PkinitPreauth plugin). Thanks. Regards, Kai
