Sorry, I should have been more clear. It works fine on Panther with krb5-1.3.x. It only fails if you're using the 1.4 sources (ie: what's on the trunk now) which you wouldn't be unless you were me... So I would expect stock Panther ssh to succeed.