GSSAPI and OpenSSH

[Jimmy Stewpot <squid@xxxxxxxxxx>]

Hello,

I am looking to plan on rolling out OpenSSH with GSSAPI/Kerberos support 
very soon. I just have some questions that I have currently unanswered 
and I hope someone can assist me on this list in getting answers for.

Within the environment we currently have "roving users" which work from 
home/on the road etc. These users are all running some variety of OSX or 
Linux on their desktops. For them to be able to access the systems is 
enabling GSSAPI authentication in their SSH enough or do they have to 
have the full kerberos running on their systems?

We currently have systems which require staging to on the internal 
network, Currently we have the ssh-agent running to allow the forwarding 
of key based requests back to the remote desktop. Does this 
functionality still work with GSSAPI or is there no longer a need to 
have the agent running?

Regards,

Jimmy