Cannot get the ssh single sign-on working with Active Directory account
1. Edit your vas.conf under the [libdefaults] section insert the following:
forwardable = true
2. In Active Directory Users and Computers, go to the computer object, right-click and choose "Properties", and on the "Delegation" tab and allow delegation by selecting on of the available options (dependent on your particular environment).
3. With ssh, add to the command line `-o "GSSAPIAuthentication yes"' whenever you connect via ssh into another machine.
Allow delegation can be considered a security risk in some situations. Setting this allows the initial ticket from a putty session to a unix box to be transferable to additional unix boxes.