When setting GSSPROXY_BEHAVIOR=REMOTE_FIRST then my setup works, howeve when the default (LOCAL_FIRST) is used and there are no local credentials available, the fallback to remote seem to fail.
pushed to master, will be in 0.3.0, preparing backport for 0.2.3 also.
Metadata Update from @simo: - Issue assigned to simo