File README.SUSE of Package pam-afs-session

Example /etc/pam.d/common-auth : 

#%PAM-1.0
#
# This file is autogenerated by pam-config. All changes
# will be overwritten.
#
# Authentication-related modules common to all services
#
# This file is included from other service-specific PAM config files,
# and should contain a list of the authentication modules that define
# the central authentication scheme for use on the system
# (e.g., /etc/shadow, LDAP, Kerberos, etc.). The default is to use the
# traditional Unix authentication mechanisms.
#
auth	required	pam_env.so
auth [success=ok default=1] pam_krb5.so 
auth [default=done]         pam_afs_session.so program=/usr/bin/aklog
auth required               pam_unix2.so try_first_pass 

Example /etc/pam.d/common-session :

#%PAM-1.0
#
# This file is autogenerated by pam-config. All changes
# will be overwritten.
#
# Session-related modules common to all services
#
# This file is included from other service-specific PAM config files,
# and should contain a list of modules that define tasks to be performed
# at the start and end of sessions of *any* kind (both interactive and
# non-interactive
#
session	required	pam_limits.so
session	required	pam_unix2.so	
session	optional	pam_umask.so
session optional 	pam_krb5.so
session required 	pam_afs_session.so program=/usr/bin/aklog


Also, edit /etc/krb5.conf and don't forget to create a hostkey in /etc/krb5.conf.