> > You need to turn it obn by hand in /etc/pam.d/*. Its not on by default, > > because that would cause nasty delays in PAM. > > I think he meant *actual* Kerberos support i.e. at the protocol level, > not just password-authentication-via-Kerberos. Yes of course! Thanks!