Hot answers tagged pam
The man page for pam_exec explains that the module provides $PAM_USER, not $USER: the following PAM items are exported as environment variables: PAM_RHOST, PAM_RUSER, PAM_SERVICE, PAM_TTY, PAM_USER and PAM_TYPE [...] On my Debian based system I added this line just before the entry for pam_motd # Run a script on login session optional ...
I got the same problem this morning but the server authenticates users against Active Directory. Turns out the user's domain password had expired.
You need to use: AuthenticationMethods publickey keyboad-interactive without a comma between publickey and keyboard-interactive.
Only top voted, non community-wiki answers of a minimum length are eligible