Imran Javeed wrote: > Can you explain the relationship with kinit & ssh as we were just using > keys generated with ssh-keygen & no KDC's Sorry, I misread the email and thought you were wondering about the GSSAPI messages that it's complaining about. To diagnose a DSA ssh key, it would help to get debug output on both sides of the connection. Usually I run a "debug" sshd on a random port to capture that side: /usr/sbin/sshd -p <fill in some random port here> -ddd One thing that has bitten me once or twice in the past is permissions on the files, but if RSA is working for you it sounds like you have that covered. Derek