GSSAPI and OpenSSH

Hello,

I am looking to plan on rolling out OpenSSH with GSSAPI/Kerberos support very soon. I just have some questions that I have currently unanswered and I hope someone can assist me on this list in getting answers for.

Within the environment we currently have "roving users" which work from home/on the road etc. These users are all running some variety of OSX or Linux on their desktops. For them to be able to access the systems is enabling GSSAPI authentication in their SSH enough or do they have to have the full kerberos running on their systems?

We currently have systems which require staging to on the internal network, Currently we have the ssh-agent running to allow the forwarding of key based requests back to the remote desktop. Does this functionality still work with GSSAPI or is there no longer a need to have the agent running?

Regards,

Jimmy