openssh unix dev - May 2002 - 3.2.3p1/auth-pam.c: PAM_PROMPT_ECHO_OFF in INITIAL_LOGIN pam state

I have been unable to use any challenge/response based pam module (eg. 
pam_opie.so) for ssh authentication, because the challenge (needed to
compute an appropriate response) is never shown during login.

do_pam_conversation() in auth-pam.c will not print any prompts while in the
INITIAL_LOGIN state, queueing them for later printing. 

Should users be able to override this (usually correct) default
behaviour, perhaps by means of a sshd configuration variable ?

On Thu, May 30, 2002 at 10:43:54PM +0000, sslannounce at myrealbox.com
wrote:
> I have been unable to use any challenge/response based pam module (eg. 
> pam_opie.so) for ssh authentication, because the challenge (needed to
> compute an appropriate response) is never shown during login.
> 
> do_pam_conversation() in auth-pam.c will not print any prompts while in the
> INITIAL_LOGIN state, queueing them for later printing. 
> 
> Should users be able to override this (usually correct) default
> behaviour, perhaps by means of a sshd configuration variable ?
shouln't the pam module tell auth-pam.c whether echo should be on
or off?