dcw@stark:~$ for i in $(cat /tmp/f);do echo "$i:"$(ssh -o batchmode=yes -n dcw@$i "rpm -q sles-release kernel-default" ); done
cpcksh: Permission denied
m4t0338g.houston.softwaregrp.com:
cpcksh: Permission denied
m4t0339g.houston.softwaregrp.com:
m4t0340g.houston.softwaregrp.net:sles-release-12.5-1.171.x86_64 kernel-default-4.12.14-120.1.x86_64 kernel-default-4.12.14-122.26.1.x86_64 kernel-default-4.12.14-122.103.1.x86_64
m4t0353g.houston.softwaregrp.net:sles-release-12.5-1.171.x86_64 kernel-default-4.12.14-120.1.x86_64 kernel-default-4.12.14-122.103.1.x86_64
m4t0354g.houston.softwaregrp.net:sles-release-12.5-1.171.x86_64 kernel-default-4.12.14-120.1.x86_64 kernel-default-4.12.14-122.103.1.x86_64
cpcksh: Permission denied

we jsut want to be able to 'ssh user@external_box command', which works everywhere else. if we do NOT pass it a command we get cpcksh as expected so it's not a comms issue. it appears the DXC PAM is rejecting passing a command when in my opinion it should not. it should log it and let it pass like pro