Followup up: If AFTER I log in, I issue > kinit and type my password in. Now when I do a klist I get ticket information. Shouldn't the pam module do this aotomatically (call kinit)? If anyone can educate me in kerberos, I'd appreciate it.