Feels like I'm missing something fundamental here...
Have a non-domain machine (personal machine off site) from which I VPN into our work network. Once connected, from 'klist', it appears my VPN client (Juniper) has negotiated a Kerberos ticket (krbtgt/ @ ). Note also that the local login username for this machine is different than my Active Directory username.
I'd then like to use GSSAPI/Kerberos enabled PuTTY to SSH to a Linux host (Linux host is set up properly w/ SSSD and accepts GSSAPI logins from a similarly configured PuTTY instance which is a member of the work domain). However, I get prompted for a password on login rather than simply getting passed through.
Is there a way I can point PuTTY explicitly at the ticket I see in klist? Do I need to try to attempt to obtain a new ticket? If so, how? Do I need a different type of ticket (host vs. krbtgt)? I did experiment with ksetup /MapUser to try and map my local user account to the ticket I see in klist, but I get a failure with my syntax and am not sure if that's the right tree to be barking up, anyway.
Obviously I have other login alternatives here, but would like to understand what's going on.
Thanks in advance!