If I set it to "no", should I still be able to login with a typed-in password? I get messages such as these: --- Jul 2 12:23:39 remedy.udel.edu sshd[6811]: [ID 800047 local4.debug] debug1: userauth-request for user ed service ssh-connection method password Jul 2 12:23:39 remedy.udel.edu sshd[6811]: [ID 800047 local4.debug] debug1: attempt 1 failures 1 Jul 2 12:23:39 remedy.udel.edu sshd[6811]: [ID 800047 local4.debug] debug2: input_userauth_request: try method password Jul 2 12:23:39 remedy.udel.edu sshd[6811]: [ID 800047 local4.debug] debug1: PAM Password authentication accepted for user "ed" Jul 2 12:23:39 remedy.udel.edu sshd[6811]: [ID 800047 local4.info] Accepted password for ed from 128.175.1.9 port 33485 ssh2 --- What is a typical example of PAM "challenge response" authentication as referred to in sshd(8) under the explanation for "PAMAuthenticationViaKbdInt"? Just a sanity check... Thanks, Ed Ed Phillips <ed at udel.edu> University of Delaware (302) 831-6082 Systems Programmer III, Network and Systems Services finger -l ed at polycut.nss.udel.edu for PGP public key