AFS is a distributed network file system. It uses in-kernel credentials (AFS tokens) obtained from Kerberos tickets for authentication and access control, and controls access to those credentials via PAGs (process authentication groups). This module provides a PAM session implementation that puts new logins in separate PAGs and optionally runs an external program (usually aklog) to obtain tokens from Kerberos tickets. It is designed to work with a Kerberos PAM module that obtains the initial Kerberos tickets.
