Thanks to all that have given suggestions. I have solved the issue partially.
I added the following lines to the pam.conf file sshd-kbdint account requistite pam.roles.so.1 sshd-kdbint account required pam_unix_account.so.1 I have also configured port 22 as an MLP for both private and shareed (section 4 and 5 of tnzonefg). I can now ssh as a user in the unclass zone from deepthought to raven. However, I can not ssh from raven as a user in the unclass zone to deepthought.? I do not get a password prompt at all. I send a SYN from raven and I immediately get a RST from deepthought. Also, I can not ssh to myself on deepthought. This message posted from opensolaris.org