--- wikisrc/kerberos/system.mdwn	2009/11/11 17:20:26	1.4
+++ wikisrc/kerberos/system.mdwn	2011/08/01 14:26:18	1.5
@@ -15,6 +15,17 @@ To use Kerberized TNF services, log in w
 `$ kinit <username>@NETBSD.ORG`
 
 The right-hand side is a Kerberos realm, not a DNS domain. Case is significant!
+
+##### A Keychain trick
+
+To pop up a GUI password dialog:
+
+`$ kinit <username>@NETBSD.ORG </dev/null`
+
+Check "Remember this password in my keychain" to simplify future
+logins down to a one-word, prompt-free command:
+
+`$ kinit`
 """]]
 
 #### [[!toggle id="netbsd" text="NetBSD"]]