PAMAuthenticationViaKbdInt and KeyAuth

[Stephan Mueller]

Hi there,

when enabling the option PAMAuthenticationViaKbdInt, a login with password is 
always possible, even though when you disabled it with PasswordAuthentication 
no and PermitRootLogin without-password!

Is this intended? Why is there no documentation about this (or at least a 
waring in the default configuration file)?

The problem is, it is enabled in the default installation of Debian OpenSSH 
packages!

Thanks
Stephan
-- 
Stephan Müller                   Stephan.Mueller at atsec.com
Whenever you eliminate the impossible, whatever
               remains, however improbable, must be the truth.