Hi again, I stumbled upon http://sourceforge.net/mailarchive/forum.php?thread_id=7432600&forum_id=3647 in my googling, and can confirm that moving /lib/tls out of the way allows the SSH daemon to permit logins without any further reconfiguration. So maybe this is a bizarre libc6 + 2.6.10 (in my case) UML bug? regards Andrew