I want to be able to use my afs filesystem from my web server (ie, nobody present to klog)... If these are publicly available web pages, you just acl them anyuser:rl. If they are private web pages, you need some sort of proxy, like TGS+: http://www.citi.umich.edu/projects/kerb_pki/index.html