Please, tell me what I am missing? Been through all I can read about pam.d but have not found what step I have skipped that causes the need for "klog" after a successful "ssh" connection just to obtain a token. Pete