Is there such a thing as PAM embedded within another PAM? such as basic PAM auth for ssh, then routed somehow to local Kerberos PAM? sort of like within a shell? Phill Tejada mailto:phill at fruitbatsoftware.com