SSH Communications Security
Previous Next Up [Contents] [Index]

    About This Document>>
    Introduction to SSH Secure Shell >>
    Configuring SSH Secure Shell >>
    Authentication >>
    Log Messages >>
    Using SSH Secure Shell >>
    Tool Syntax>>
    Technical Specifications >>
        Supported Cryptographic Algorithms and Standards >>
        Authentication Methods

Authentication Methods

The following table shows the available authentication methods and limitations on their use.

AvailableSuitable forRequires Requires
from scripting additional additional
binaries software hardware
Password x
User public key
- ssh2 keys x x
- ssh1 keys x x
- PGP keys x x x
Certificates
- software x x
- PKCS #11 tokens x x
Host-based x x
Kerberos5
- client x
- server x
RSA securID
- client x x
- server x
PAM
- client x
- server x

If Available from binaries is not checked, the authentication method in question can be enabled by compiling from source. See Chapter Authentication for instructions.

Explanation:

  1. Use ssh-agent2 or NULL passphrase. Note that in the latter case it is extremely important that no one else can access your private key.
  2. Only the OpenPGP standard and programs using it are supported.
  3. Only Kerberos5 is supported
  4. SecurID tokens
  5. RSA ACE/Server or RSA ACE/Agent software
  6. Only PAM on Linux and on Solaris 2.6 or later is supported.

Previous Next Up [Contents] [Index]


[ Contact Information | Support | Feedback | SSH Home Page | SSH Products ]

Copyright © 2003 SSH Communications Security Corp.
All rights reserved.
Copyright Notice