On Nov 21, 2007, at 12:45 AM, Quan Qiu wrote: > > "ChallengeResponseAuthentication no" is also required to avoid sshd > accepting keyboard-interactive/pam. > > I don't think this setting matters for PermitRootLogin without- password. At least the default on FreeBSD 6 works as expected when setting the root login limit.