System access server settings

[mooh]

It appears that in order to enforce OTP authentication the local database must not be used concurrently. However, when configured this way, access via ssh + password is lost. Thus, you can have it only one way or the other at a time. I think it should be possible to use both methods concurrently. Is there a way to achieve that?

P.S.: Please no discussion about ssh + password...