pam_unix2.conf and Kerberos question