On 16 Dec 2008, at 13:37, Rowley, Mathew wrote: > If you have a kerberos ticket, and ssh to a box that has GSSAPI > enabled, will that pass through/disregard the PAM stack? With OpenSSH, it will use the setcred bit of the auth stack, and the account and session stacks, but disregard the authentication portion of the auth stack. S.