Hello, I have already made some successful tests with - PKINIT with a heimdal snapshot on one hand - the PAM module from Mario Strasser pkcs11_login and also the PAM module that comes with opensc on the other hand. Does anyone have already try merging those too points in order to achieve a 2 factors authentication with Kerberos? Best regards, Manu