--- wikisrc/kerberos/system.mdwn	2009/11/11 17:20:26	1.4
+++ wikisrc/kerberos/system.mdwn	2011/08/06 00:09:47	1.7
@@ -15,6 +15,15 @@ To use Kerberized TNF services, log in w
 `$ kinit <username>@NETBSD.ORG`
 
 The right-hand side is a Kerberos realm, not a DNS domain. Case is significant!
+
+##### A Keychain.app trick
+
+To pop up a GUI password dialog:
+
+`$ kinit <username>@NETBSD.ORG </dev/null`
+
+Check "Remember this password in my keychain" to make future Kerberos
+logins (sans input redirection) prompt-free.
 """]]
 
 #### [[!toggle id="netbsd" text="NetBSD"]]