> The problem is most likly that a token and PAG may be obtained, but > under > the wrong process, because of the Priv Sep code. No, thats not the situation. I turned set the 'UsePrivilegeSeparation"-option to 'no' in the sshd conf.