The following reply was made to PR bin/29555; it has been noted by GNATS.

From: Geoff Wing <gcw@pobox.com>
To: NetBSD GNATS <gnats-bugs@netbsd.org>
Cc: 
Subject: Re: bin/29555
Date: Tue, 1 Mar 2005 13:41:28 +1100

 I suspect I've misinterpreted at least part of the problem.  It doesn't
 special case when su'ing to root so the wrong principal is asked for.
 It does call krb5_kuserok() so $HOME/.k5login is probably used ok.