Michael (or any one else reading),
I think I may be one step closer again. I've been reading up on kerberos and specifically TGTs you mentioned. I discovered the kinit command.
If I run kinit it 'guesses' the correct username - I enter my password and all my kerberized stuff works.
Code:
client$ kinit
Please enter the password for user@SERVER.xxxx.PRIV:
client$ klist
Kerberos 5 ticket cache: 'API:Initial default ccache'
Default principal: user@SERVER.xxxx.PRIV
Valid Starting Expires Service Principal
02/11/08 20:17:50 02/12/08 06:17:50 krbtgt/SERVER.xxxx.PRIV@SERVER.xxxx.PRIV
renew until 02/18/08 20:17:50
So, why does the login window not just initiate kinit or a similar bit of code.
Thanks again
Hans