Module can't get PAM_AUTHTOK

[ltcabral]

Hello,

im calling the following module in /etc/pam.d/common-auth:

auth    optional        pam_krb5_migrate.so debug

and this module is supposed to create a Kerberos principal using login credentials, but it fails when trying to retrieve PAM_AUTHTOK into variable pass with the following part of the code:

retval = pam_get_item(pamh, PAM_AUTHTOK, (const void **)&pass);

if (retval != PAM_SUCCESS) {
    ...
} else if (pass == NULL) {
    retval = PAM_AUTHTOK_RECOVER_ERR;
    goto cleanup;
}

the module seems to be ok, but I'm not sure if i missed something in pam configuration, or if the way I use it is wrong.

/var/log/auth.log
Aug  5 13:55:07 luist login(pam_krb5_migrate)[2374]: Authenticating as principal pam_migrate/myhostname@MYREALM with keytab /etc/security/pam_krb5.keytab.
Aug  5 13:55:07 luist login(pam_krb5_migrate)[2374]: username [luist] obtained
Aug  5 13:55:10 luist login[2374]: pam_unix(login:session): session opened for user luist by LOGIN(uid=0)
Aug  5 13:55:10 luist dbus-daemon: Rejected send message, 1 matched rules; type="method_call", sender=":1.29" (uid=5312 pid=3761 comm="/usr/lib/indicator-

applet/indicator-applet --oaf-a") interface="org.freedesktop.DBus.Properties" member="Get" error name="(unset)" requested_reply=0 destination=":1.45" (uid=0 pid=2374 comm="/bin/login --       "))

How can i make this work?
Thanks in advance