On Fri, Aug 29, 2008 at 05:02:31PM -0400, Steven M. Bellovin wrote: > It strikes me as an excellent idea -- I always disable PAM for > precisely this reason. Me too. I would even suggest that we should ship a default sshd config that disables PAM. Martin