Kerberos authentication only requires a hostname and a username, but the client refuses to autoconnect unless you also give it a meaningless -p/-P flag. Autologin with username/password: tlclient -u username -p password hostname.domain tlclient -u username -P some-kind-of-askpass-program hostname.domain Autologin with kerberos: tlclient -u username -p '' hostname.domain tlclient -u username -P true hostname.domain tlclient should know that the username and server is all it needs when configured with Kerberos authentication, and trigger autologin once all required data for authentication is passed, or perhaps we should extend the parameters with a specific --autologin or --autoconnect command to avoid ambiguity about when the client may autologin.
> or perhaps we should extend the parameters with a specific --autologin > or --autoconnect command to avoid ambiguity about when the client may > autologin. See bug 2576.