I inadvertently had sl-contrib enabled on an SL4.6 system and this morning it updated openssh, 
openssh-server, etc, getting them from sl-contrib.  For instance:

openssh-server-3.9p1-22.SL.4.22.i386

According to the changelog, the changes appear to only include some bug fixes compared to the 
"stock" SL version (3.9p1-8).  But upon logging in, it now tries (unsuccessfully) to get an AFS 
token with the aklog command, which I'd rather it not do.  I don't see any reason for this in the 
sshd_config, which matches a box with the 3.9p1-8 version.  Specifically, all the Kerberos options 
are commented out:

# Kerberos options
#KerberosAuthentication no
#KerberosOrLocalPasswd yes
#KerberosTicketCleanup yes
#KerberosGetAFSToken no


Could the package in sl-contrib be a build for SLF instead of an SL build or possibly have some 
remnant(s) of the changes for SLF/LTS?

I know I can downgrade to the non-contrib version, but am wondering if this might be a small oops in 
the contrib section?  Or perhaps I don't understand the contrib section's purpose.  Then again, 
perhaps all of this will clear up with the openssh updates due out later today for other reasons.

-Wayne