On Mon, Jan 03, 2011 at 06:15:54PM +0000, Simon Wilkinson wrote: > You probably also want: > > GSSAPIKeyExchange yes Does Fedora come with that patch already applied then? I guess that not setting it wouldn't actually prevent the login taking place though.