1. 8
  1.  

  2. 1

    PAM can not be disabled with the UsePAM option

    That’s a curious feature. I imagine the rationale is “we don’t want these logins to be different” but that seems to be exactly why the option exists, to make them different. If logins without PAM don’t actually work, then the same should be hard coded in openssh. I wonder what the rationale is.