Tomorrows snapshot synchronises us with OpenBSD CVS HEAD and includes fixes to several bugs. (Including the KrbIV/AFS/Tgt issue). Portable -current also makes PAM work (or seem to) when sshd is configured with UsePrivilegeSeparation=yes. This is still experimental, please let openssh-unix-dev@ know how you goes. -d