dieter <dieter.NetBSD@pandora.be> typed:
:                                              But do you see any problem 
: with just commenting out the pam_ssh module in the default pam config? 
: That way, the behaviour is as before (AFAICS).

To my understanding, with the current half-PAMified sshd, that would be the
correct short-term change.  The long term change being to fully PAMify sshd
and extend pam_ssh to handle the current default.

Regards,
Geoff