SSH Tectia

User Authentication with Keyboard-Interactive

Keyboard-interactive is a generic authentication method that can be used to implement different types of authentication mechanisms. Any currently supported authentication method that requires only the user's input can be performed with keyboard-interactive.

Currently, the following methods are supported:

  • password

  • PAM (Unix only, see note below)

  • RSA SecurID

  • RADIUS

Methods that require passing some binary information, such as public-key authentication, cannot be used as submethods of keyboard-interactive. But public-key authentication, for example, can be used as an additional method alongside keyboard-interactive authentication.

[Note]Note

PAM has support for binary messages and client-side agents, and those cannot be supported with keyboard-interactive.