I'm still curious, why did you disable GSSAPI Authentication? It seems to me that's one of the strengths and conveniences of Kerberos authentication. I had to use a modified version of Putty from Quest to get it working: http://rc.quest.com/topics/putty/ But it's been great.