Are you using password file authentication?