GSSAPI-Kerberos-AFS * Install libkrb5-dev and libpam0g-dev * Make sure you have a valid /etc/krb5.keytab * Make sure hostname --fqdn matches the principle in ^^ (check /etc/hosts for culprit if it doesn't) * Make sure the domain/host/realm mappings in /etc/krb5.conf * Check libdefaults and appdefaults in your /erc/krb5.conf with mine (make sure they are sane) * Make sure not to grab krb4 stuff if you shouldn't (krb5.conf) * Download redhats pam_krb5 and compile with ./configure --prefix=/usr * This points security stuff in /usr/lib/security * Add /usr/lib/security/ to /etc/ld.so.conf (I am not sure if you need to this.. but it can't hurt) * Run ldconfig * Have MIT kerberos install and openafs-krb5 * Make sure you can kinit/aklog happily manually * Take a look at my /etc/ssh/ssh_config and /etc/ssh/sshd_config... use and edit to your configuration * Take a look at my /etc/pam.d/common-* * Putty.exe is a PUTTY client with GSSAPI support patched in :)