my problem was due to an /etc/nologin that was somehow accidently created. It would be really nice if ssh supported the message that FTP, once I set it up to test PAM, was kind enough to show me, and ring a bell to clue me to the presence of /etc/nologin.