move pam_nologin to account; auth doesn't work with publickey

1 files changed, 3 insertions, 3 deletions

diff --git a/debian/openssh-server.ssh.pam b/debian/openssh-server.ssh.pam
index d34ee091c..c3ff13e82 100644
--- a/debian/openssh-server.ssh.pam
+++ b/debian/openssh-server.ssh.pam
@@ -1,8 +1,5 @@
 # PAM configuration for the Secure Shell service
 
-# Disallow non-root logins when /etc/nologin exists.
-auth       required     pam_nologin.so
-
 # Read environment variables from /etc/environment and
 # /etc/security/pam_env.conf.
 auth       required     pam_env.so # [1]
@@ -10,6 +7,9 @@ auth       required     pam_env.so # [1]
 # Standard Un*x authentication.
 @include common-auth
 
+# Disallow non-root logins when /etc/nologin exists.
+account    required     pam_nologin.so
+
 # Standard Un*x authorization.
 @include common-account