To begin with, don't complicate the situation by requiring two forms of authentication before you've gotten a single form of authentication working. In addition, root is too much of a special case for useful debugging; try your tests as a regular user. As Tim Rice noted, you will need to set EnableSSHKeysign in the system--wide client configuration for hostbased authentication to work for non-root users. -- Iain Morgan _______________________________________________ openssh-unix-dev mailing list openssh-unix-dev@xxxxxxxxxxx https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev