[OpenAFS] xscreensaver locks at 2nd try to unlock

[Marc Schmitt]

Hi Thomas,

Thomas Mueller wrote:

> For screensavers it should be better to use "refresh_token", because you
> want to have a new token within the old PAG.
> 
> We use this configuration (on Redhat 6.2) for xscreensaver:
> 
> % cat /etc/pam.d/xscreensaver
> auth       sufficient   /lib/security/pam_afs.krb.so.1 ignore_root refresh_token
> auth       required     /lib/security/pam_pwdb.so try_first_pass
> %
> 
> and it works for us.
> 
> Thomas.
> 


I tried your configuration and it works flawlessly, thanks a lot! :)

Best regards,
	Marc