Sorry, I double checked my last statement (my ticket wasn't what I thought it was).
It seems that the user is prompted for a password before kerberos is attempted, so gvfs *is* using kerberos correctly, ie. canceling the password prompt connects to the desired share.
gvfs just needs to try the kerberos auth before prompting the user for username/domain/passwd.
Sorry, I double checked my last statement (my ticket wasn't what I thought it was).
It seems that the user is prompted for a password before kerberos is attempted, so gvfs *is* using kerberos correctly, ie. canceling the password prompt connects to the desired share.
gvfs just needs to try the kerberos auth before prompting the user for username/ domain/ passwd.