Here is a small update on this bug. The PAM setting part is no longer relevant, as the pam.d/kdm file now include the common-* files, which are not part of a package. The /etc/kde3/kdm/Xaccess file is still a bit problematic, as it is still part of the kdm package, and modifying it automatically at install time is problematic. Happy hacking, -- Petter Reinholdtsen