You didn't say whether your client is MIT or Heimdahl. If it's heimdahl, try this: [appdefaults] afs-use-524 = 2b I'm using this with aklog but I would think pam would be similar. It's different for MIT but I don't remember the details.