can't unlock xscreensaver

[steve]

This is my first post here so hi everyone.

We have a Lan of Linux and win 7 boxes under a Samba 4 pdc. On Linux, 
our Kerberos password does not unlock xscreensaver. We get 
'Authentication failed'.

openSUSE 12.1. a few files:

/etc/krb5.conf
[libdefaults]
     default_realm = HH3.SITE
     dns_lookup_realm = false
     dns_lookup_kdc = true
     clockskew = 300
[domain_realm]
     .hh3.site = HH3.SITE
[realms]
     HH3.SITE = {
         kdc = 192.168.1.3
         default_domain = hh3.site
         admin_server = 192.168.1.3
     }
[appdefaults]
     pam = {
         ticket_lifetime = 1d
         renew_lifetime = 1d
         forwardable = true
         proxiable = false
         minimum_uid = 1
         clockskew = 300
         external = sshd
         use_shmem = sshd
     }

/etc/pam.d/common-auth
auth    required    pam_env.so
auth    optional    pam_gnome_keyring.so
auth    sufficient    pam_unix2.so
auth required pam_krb5.so
auth    required    pam_ldap.so    use_first_pass

/etc/pam.d/xscreensaver
auth     include        common-auth
account  include        common-account
password include        common-password
session  include        common-session

Any ideas anyone?
Thanks,
Steve