Put in alphabetical order
diff --git a/sshd_config.5 b/sshd_config.5
index 1278cb6..8250be8 100644
--- a/sshd_config.5
+++ b/sshd_config.5
@@ -422,15 +422,6 @@
are refused if the number of unauthenticated connections reaches
.Dq full
(60).
-
-.It Cm UsePAM
-Enables PAM authentication (via challenge-response) and session set up.
-If you enable this, you should probably disable
-.Cm PasswordAuthentication .
-If you enable
-.CM UsePAM
-then you will not be able to run sshd as a non-root user.
-
.It Cm PasswordAuthentication
Specifies whether password authentication is allowed.
The default is
@@ -607,6 +598,13 @@
If
.Cm UsePrivilegeSeparation
is specified, it will be disabled after authentication.
+.It Cm UsePAM
+Enables PAM authentication (via challenge-response) and session set up.
+If you enable this, you should probably disable
+.Cm PasswordAuthentication .
+If you enable
+.CM UsePAM
+then you will not be able to run sshd as a non-root user.
.It Cm UsePrivilegeSeparation
Specifies whether
.Nm sshd