add -K flag to avoid Kerberos connection