ssh GSSAPI Authentication in Opensolaris zones

I got fairly confused when I was able to ssh successfully into the global zone with GSSAPI authentication but none of the non-global zones worked. The usual suspects (time, DNS, keytab) were all perfectly fine.

Finally I found that the standard zone install does not contain SUNWgssk and SUNWgssc, the kernel GSSAPI module and its configuration. (*sigh*).

# pkg install SUNWgssk SUNWgssc

and you're rolling. No need to svcadm restart ssh.