Can't get ssh over k5/afs working well

[Sam Hartman]

In debian, using the ssh-krb5 package with a pam config like:

auth [success=ok default=1] pam_krb5.so forwardable
auth [default=1] pam_permit.so
auth       required     pam_unix.so try_first_pass
auth [default=ignore] pam_openafs_session.so


should mostly do what you want.

Note that the ssh gssapi support between 3.4/3.6 and 3.8 is
incompatible.