In article <20050310155847.GB27469@apb-laptoy.apb.alt.za>,
Alan Barrett  <apb@cequrux.com> wrote:
>On Thu, 10 Mar 2005, Manuel Bouyer wrote:
>> > What does /etc/pam.d/sshd look like?
>> 
>> # auth
>> auth            required        pam_nologin.so          no_warn
>> auth            sufficient      pam_krb5.so             no_warn try_first_pass
>> auth            sufficient      pam_ssh.so              no_warn try_first_pass
>> auth            required        pam_unix.so             no_warn try_first_pass
>
>I thought that all references to pam_ssh were to be
>disabled, following discussion on tech-security.  See
>http://mail-index.NetBSD.org/tech-security/2005/02/27/0002.html,
>http://mail-index.NetBSD.org/tech-security/2005/02/27/0005.html,
>http://mail-index.NetBSD.org/tech-security/2005/02/27/0007.html.
>

Well, not the ones in sshd :-)

christos