Use k5login_directory

[JustKiddingCode]

If search_k5login is specified, pam_krb5 only looks up .k5login in the user's home directory.
Kerberos allows to specify a k5login_directory, so that the k5login file would be <k5login_directory>/
This allows to authenticate via kerberos and then mount an encrypted home directory.

[rra]

Do you know if there's an API I can use to find the location of the user's .k5login file?

[cweickhmann]

Not sure if I understand your issue, but MIT Kerberos' docs say it is to be found in $HOME/.k5login.