diff --git a/sshd.c b/sshd.c --- a/sshd.c +++ b/sshd.c @@ -1701,6 +1701,10 @@ main(int ac, char **av) parse_server_config(&options, rexeced_flag ? "rexec" : config_file_name, cfg, NULL); + /* 'UsePAM no' is not supported in RHEL */ + if (! options.use_pam) + logit("WARNING: 'UsePAM no' is not supported in RHEL and may cause several problems."); + /* Fill in default values for those options not explicitly set. */ fill_default_server_options(&options); diff --git a/sshd_config b/sshd_config --- a/sshd_config +++ b/sshd_config @@ -101,6 +101,8 @@ GSSAPICleanupCredentials no # If you just want the PAM account and session checks to run without # PAM authentication, then enable this but set PasswordAuthentication # and ChallengeResponseAuthentication to 'no'. +# WARNING: 'UsePAM no' is not supported in RHEL and may cause several +# problems. UsePAM yes #AllowAgentForwarding yes