Colin, You asked for details, so I've dug a little more.
I had an active Kerberos ticket for a domain that was currently only partially accessible (VPN is up only some of the time, and sometimes there are only partial routes). When I run kdestroy, it removes the file in /tmp that ssh was reading from (to get the name of the unreachable system it hung on, while trying to "sendto"). Once that file, /tmp/krb5cc_1000, was removed, ssh no longer needed the -o 'GSSAPIAuthentication no' option to work properly. Is that enough to go on? -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

