Russ Allbery wrote: > OpenSSH can do this via GSSAPI with the included GSSAPI support, I think > (I think that ticket forwarding was included in the patches that OpenSSH > took). Yes, it was. You'll need to enable both GSSAPIAuthentication and GSSAPIDelegateCredentials on the client and GSSAPIAuthentication on the server. Cheers, Simon.