i think this is great

[Markus Friedl]

On Tue, Sep 26, 2000 at 10:24:56AM -0400, Michael Stone wrote:
> On Tue, Sep 26, 2000 at 09:19:00AM -0400, Theo E. Schlossnagle wrote:
> > I don't think that is right way of looking at things.  I think that SSH's "way
> > of doing things" lacks some robustness, but there are also real problem with
> > many PAM implementations (the module side).
> 
> Ok. Maybe I'm misunderstanding. What is "the ssh way" for
> challenge-response authentication mechanisms, password expiration, etc.,
> that doesn't require some sort of modifications to clients.

http://www.openssh.com/txt/draft-ietf-secsh-auth-kbdinteract-00.txt