Jean-Rene Cormier <jrc@xxxxxxxxxxxxx> writes: > Here is what I have in mine, almost the same as your except for the 2 > extra lines for pam_ssh.so > > #%PAM-1.0 > auth required pam_env.so > auth optional pam_keyring.so try_first_pass > auth optional pam_ssh.so try_first_pass > auth include system-auth > account required pam_nologin.so > account include system-auth > password include system-auth > session optional pam_keyinit.so force revoke > session include system-auth > session required pam_loginuid.so > session optional pam_console.so > session optional pam_ssh.so That works. Thanks! I'm very happy to finally see this working. It appears that pam_keyring isn't needed if pam_ssh is used. I've removed the pam_keying lines and only added the pam_ssh and things are great. -wolfgang -- Wolfgang S. Rupprecht http://www.wsrcc.com/wolfgang/