On Wed, 17 Dec 2014, Dmt Ops wrote: > vi /etc/ssh/sshd_config > ... > - ChallengeResponseAuthentication no > + ChallengeResponseAuthentication yes > + KbdInteractiveAuthentication yes > ... > > and restart the daemon You've missed the crucial part to require multiple authentication methods succeed before the user is considered authenticated: AuthenticationMethods publickey,keyboard-interactive -d _______________________________________________ openssh-unix-dev mailing list openssh-unix-dev@xxxxxxxxxxx https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev