It looks like the problem is on the client side. RedHat backported -W to 5.3p1 and clearly didn't do it right; it asks for a session channel instead of a direct-tcpip channel, so the server execs the user's shell. I don't know if that's fixable. DES -- Dag-Erling Smørgrav - des at des.no