On customer site, I am quite often forced to use a Windows machine to access the Linux boxes I work on. This means I will not have an ssh-agent (nor a gpg-agent) running on the machine I’m sitting at (the Win box) and the Linux boxes I access via putty tend to have shared home directories.

Long story short, I need one agent per Linux box taking into account that I may have more than one login shell to the Linux box (i.e. multiple putty windows) and config files including the hostname.

from time to time I need to configure an apache httpd with Kerberos authentication, a quick braindump follows.

To have chromium (and chrome) browser do Kerberos TGT for example.com web pages, one needs to pass --auth-server-whitelist="*.example.com"