On Thu, Sep 29, 2005 at 03:42:28PM -0500, Matthew Lenz wrote: > it looks like ChallengeResponseAuthentication no by itself works > correctly. you still think usePam no is needed?
I think it depends on the OpenSSH version. IIRC, there are (were?) a number of entries in the BTS which indicate that both options are needed... at least in some cases.
signature.asc
Description: Digital signature