The "workgroup" parameter is not used at all in cli_session_setup_kerberos(). Remove it.