I'm fighting with SSO and SSH on Debian Wheezy. Locally it works fine. I'm getting ticket successfully at login. But when I've logged in to the remote machine by SSH without password,
klist on the remote machine finds no credentials. I tried to get more how-to, but I just know, that there must be enabled these options in
Host * ... GSSAPIAuthentication yes GSSAPIDelegateCredentials yes ...
Then each forwardable ticket should be sent. But it isn't. I tested by
klist -f command, whether there is a F flag on the ticket. Yes, there is F shown. Despite I've to call
kinit on the remote machine to get endowed with a key.