Fixed a "how'd that ever work?" bug in one of the apps I've been bundling with pam_krb5 (afs5log) today — it never checked for the presence of the ioctl-in-proc method of calling into AFS, so it couldn't give tokens to the kernel. Not something you'd ever noticed if you're not using AFS, but it's odd that it had always worked for me until today.

Fixed a few lingering bugs for older releases.

Started looking at why unlocking my screen with gnome-screensaver doesn't net me fresh Kerberos credentials the way doing so with xscreensaver does in Raw Hide. Need to chase that down further.

Also looking at what happens when you leave krb5-auth-dialog's password prompt dialog running all weekend: you eventually get credentials that are good starting now, but which expired yesterday. (Whee!)