Solaris 9 latest OEM SSH + pam_krb5.so.1

[Jeff Blaine]

> This may be obvious, but does the account jblaine exist on the system?  It
> has to be provided by an nsswitch provider, or sshd will always reject
> logins to that account regardless of whether it passes a PAM
> authentication check.

Yes, the account exists.  I am able to telnet in fine as jblaine.

> Also, note that unless the account exists in /etc/shadow (even if you're
> not using local passwords), the Unix PAM account module will reject the
> login at least in Solaris 8.