> Thank you for the insight, but I forgot to mention that I am not >using the pam_afs module. I am using the pam_krb5afs module that come >with redhat. Our site just migrated to krb5 and the kdc will be turned >off by the end of the month. Won't that make your migration to krb5 a bit difficult? :-) --Ken