On 07/23/2016 05:53 PM, Darren Tucker wrote: > 1) Use the per-auth-type PAM configs as per > https://bugzilla.mindrot.org/show_bug.cgi?id=2246. > 2) Configure the ssh-passwd stack to have just pam_unix.so and the > ssh-kbdint stack to have just pam_signal.so. > 3) Put "AuthenticationMethods password,keyboard-interactive > publickey,keyboard-interactive" into sshd_config. This seems to be exactly what I'm looking for. I see that a patch was written on 2015-04-16 that implements this functionality, though there has been no action taken or feedback given on the patch since then. Has this slipped through the cracks, or were there more issues that needed to be resolved before merging? James Murphy _______________________________________________ openssh-unix-dev mailing list openssh-unix-dev@xxxxxxxxxxx https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev