Problems with Heimdal Module for PAM

[Matt Proud]

Hi,

I am having some problems with the Heimdal module for PAM. I'm getting
the following in /var/log/{syslog,authlog} when performing 'su - matt'
as matt.

Feb  8 15:50:58 chromium sudo: pam_krb5: pam_sm_authenticate(sudo
matt): pam_get_data(): ccache data already present
Feb  8 15:50:58 chromium sudo: pam_krb5: pam_sm_authenticate(sudo
matt): exit: failure
Feb  8 15:51:25 chromium sudo: pam_krb5: pam_sm_authenticate(sudo matt): entry:
Feb  8 15:51:28 chromium sudo: pam_krb5: pam_sm_authenticate(sudo
matt): exit: success
Feb  8 15:51:28 chromium sudo: pam_krb5: pam_sm_authenticate(sudo matt): entry:
Feb  8 15:51:30 chromium sudo: pam_krb5: pam_sm_authenticate(sudo
matt): pam_get_data(): ccache data already present
Feb  8 15:51:30 chromium sudo: pam_krb5: pam_sm_authenticate(sudo
matt): exit: failure
pam_authenticate: Authentication service cannot retrieve authentication info.

I can kinit as matt just fine. Sudo su - matt as root works, but it
spits out an error about not being able to get authentication
information. I have tested this out on the KDC as well as one client,
and it works nowhere.

Does anyone have any thoughts?

Best,

Matt