OpenSSH, GSSAPI, and PAM

[Nathan Ward]

Hi,

I am trying to use Kerberos5 authentication with OpenSSH, which I have 
working fine.
But I also require it to call some PAM modules (pam_openafs_session.so) 
to setup a PAG and get tokens etc.
I would get users to run aklog after they login, but thier homedirs are 
in AFS so it gets kind of icky looking.

I may have to hack up something to get a PAG, as IIRC the OpenAFS module 
does this in its 'auth' stuff, but thats ok.

Is anyone doing something like this?

Nathan Ward