Index: src/mod_pam_ssh.c
===================================================================
--- src/mod_pam_ssh.c	2012-08-06 16:39:19.000000000 +0200
+++ src/mod_pam_ssh.c	2012-08-14 14:52:14.649970973 +0200
@@ -44,7 +44,7 @@ write_config_ssh (pam_module_t *this, en
       break;
 
     case AUTH:
-      fprintf (fp, "auth\toptional\tpam_ssh.so\ttry_first_pass ");
+      fprintf (fp, "auth\tsufficient\tpam_ssh.so\ttry_first_pass ");
       break;
 
     case SESSION:
Index: src/supported-modules.h
===================================================================
--- src/supported-modules.h	2012-08-06 16:59:11.000000000 +0200
+++ src/supported-modules.h	2012-08-14 14:55:27.022709610 +0200
@@ -100,8 +100,8 @@ static pam_module_t *module_list_auth[]
   &mod_pam_fprint,
   &mod_pam_fprintd,
   &mod_pam_thinkfinger,
-  &mod_pam_gnome_keyring,
-  &mod_pam_ssh,     /* optional modules MUST executed before sufficient modules which also need a password. */
+  &mod_pam_gnome_keyring, /* optional modules MUST be executed before sufficient modules which also need a password. */
+  &mod_pam_ssh,
   &mod_pam_unix2,
   &mod_pam_unix,
   &mod_pam_ecryptfs,