First, thanks for making my life much more secure! Second, note that I just went from ssh 1.2.27 to openssh 2.3.0p1 and found that server-side scp was broken: make install put scp in /usr/local/bin yet the server-side PATH doesn't include /usr/local/bin... ssh-server# pwd /usr/local/src/openssh-2.3.0p1 ssh-server# ./configure --sysconfdir=/etc --with-ssl-dir=../openssl-0.9.6 \ --with-kerberos4=../krb4-1.0.3 --with-afs=/usr/afsws ssh-server# make; make install ssh-server# sshd -d -p 2222 ssh-client# ssh -P 2222 /etc/motd ssh-server:/dev/null [...] PATH=/usr/bin:/bin:/usr/sbin:/sbin [...] bash: scp: command not found lost connection Maybe this is just a problem introduced my crazy ./configure for afs, but it seems like USER_PATH should be include bindir (ala --prefix) when --with-default-path=PATH is not used or somesuch hacking sillyness. I readly admit it's easy 'nuf to hack _PATH_STDPATH in defines.h, at any rate. later steve - - - systems & network guy high energy physics university of wisconsin