On Thu, 10 Mar 2005, Manuel Bouyer wrote:
> > What does /etc/pam.d/sshd look like?
> 
> # auth
> auth            required        pam_nologin.so          no_warn
> auth            sufficient      pam_krb5.so             no_warn try_first_pass
> auth            sufficient      pam_ssh.so              no_warn try_first_pass
> auth            required        pam_unix.so             no_warn try_first_pass

I thought that all references to pam_ssh were to be
disabled, following discussion on tech-security.  See
http://mail-index.NetBSD.org/tech-security/2005/02/27/0002.html,
http://mail-index.NetBSD.org/tech-security/2005/02/27/0005.html,
http://mail-index.NetBSD.org/tech-security/2005/02/27/0007.html.

--apb (Alan Barrett)