mark.d.witmer at gmail.com writes: > 36 0 # Length of auth name + padding > 32 0 # Length of auth data + padding This was my mistake -- you don't send the length of the string + padding; just the length of the string. It should be 18 0 16 0 -- Mark Witmer