> But we should address another problem : the login process on the
> workstation must get a coda token for the user ! 

No, not the login-process, but the first shell should have it.
I solved the problem by using kerberos as login via PAM
to get a ticket and run clog from a script in /etc/profile.d,
whenever klist can prove that a valid ticket exists.

Further you need some elongation-mechanism like 'kredentials' to
renew tickets and coda-tokens automatically, as long as you stay in
the system.

	Martin