[OpenAFS] ssh: obtaing token at login

[Andreas Buechler]

Hi all,

still having problems getting automatically tokens after login. The
problem is, that I dont get any token after sucssessfully login via ssh
to my machine. If I try it with telnet its no problem I get a token
automatically. My /etc/pam.d/sshd file looks like:

############################################
#%PAM-1.0

auth       sufficient   /lib/security/pam_unix.so
auth       sufficient   /lib/security/pam_afs.so try_first_pass
ignore_root
auth       required     /lib/security/pam_nologin.so

account    required     /lib/security/pam_stack.so service=system-auth

password   required     /lib/security/pam_stack.so service=system-auth

session    required     /lib/security/pam_stack.so service=system-auth
session    required     /lib/security/pam_limits.so
session    optional     /lib/security/pam_console.so
#############################################

After login with ssh /var/log/messages shows:

Jul 18 11:45:38 testpc sshd(pam_unix)[1717]: authentication failure;
logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=localhost  user=testuser

Jul 18 11:45:38 testpc pam_afs[1718]: AFS Authentication failed for user
testuser. password was incorrect
Jul 18 11:45:38 testpc pam_afs[1719]: AFS Authentication failed for user
testuser. password was incorrect
Jul 18 11:45:38 testpc sshd(pam_unix)[1717]: session opened for user
testuser by (uid=0)
Jul 18 11:45:38 testpc pam_afs: AFS Authentication failed for user
testuser. password was incorrect

I dont understand why AFS says authentication failed, Im sure that I
didnt misstype the password (tried it several times). And I also dont
have any idea why its then working when I get a token manually with
klog.
Im reading "The Linux-PAM System Administrators Guide" now, but dont
have any new ideas till now. If some else knows about other sources that
could help me to better understand my problem, please let me know!

Thanks, Andi