Apply this patch first. Then you can apply this patch for kerberos support. Kerberos support is completely rewritten. So, it is no longer part of authentication process. Until not saved it is kept in memory cache.
Ticket is stored in the default cache by default.
The old patch for ssh is still available . It is compatible with the patch above. This is an Apache module for kerberos authentication. It is based on the this apache module . You can use Mosaic as a native kerberos client with this patch .