Hi, There's a typo in the section describing ChallengeResponseAuthentication: ChallengeResponseAuthentication Specifies whether challenge-response authentication is allowed (e.g. via PAM or though authentication styles supported in login.conf(5)) The default is “yes”. It shoud be "through" not "though." -- Iain Morgan