Are you using LDAP for nss in /etc/nsswitch.conf? This sounds more like an NSS or Kerberos issue than a PAM issue.
-- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org