IN my Debian packages I include a module called libpam-openafs-session that can convert tickets into tokens. The upstream website isn't particularly useful yet, so you can consider the Debian sources as authoritative. http://non-us.debian.org/pool/non-US/main/libp/libpam-openafs-session/. Let me know if you have any problems.