>>>>> "Dan" == Dan Lapine <dlapine@ncsa.uiuc.edu> writes: Dan> So, no quick fix to get pam working? I'd take an ugly hack at Dan> this point... Don't use that PAM module. The debian libpam-openafs-session (http://non-us.debian.org/debian-non-US/pool/non-US/main/libp/libpam-openafs-session) can be used to call an external aklog to convert tokens into tickets without dealing with this mess.