I tried setting KRB5_TRACE like this: KRB5_TRACE=/tmp/krb5_tracefile.txt /usr/sbin/openvpn --writepid /var/run/openvpn.server.pid --syslog ovpn-server --cd /etc/openvpn --config /etc/openvpn/server.conf
and restarted openvpn. Yet I see no krb5_tracefile.txt in /tmp. According to http://k5wiki.kerberos.org/wiki/Debugging_tips "The KRB5_TRACE environment variable will not work for secure contexts, such as those created by ksu or login systems." Is PAM such a "secure context"? >Any chance you can set KRB5_TRACE to the name of a file in /tmp in the >environment of openvpn and send the output that generates? -- Ralf Hildebrandt Charite Universitätsmedizin Berlin ralf.hildebra...@charite.de Campus Benjamin Franklin http://www.charite.de Hindenburgdamm 30, 12203 Berlin Geschäftsbereich IT, Abt. Netzwerk fon: +49-30-450.570.155 -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org