Using a Debian system with a Kerberos/LDAP client - login fails on KDE as a user directory isn't being created. SSH is successful (and no directory is created); however, desktop login isn't. I've added the line:
session required pam_mkhomedir.so skel=/etc/skel/ umask=0022
In /var/log/auth.log on the Kerberos/LDAP server , I see:
NEEDED_PREAUTH: user@MY.LAN for krbtgt/MY.LAN@MY.LAN, Additional pre-authentication required
What's missing? I have other clients working. I'm not sure what the difference is.