Your browser does not allow storing cookies. We recommend enabling them.

SSH Tectia

User Authentication with Passwords

The password authentication method is the easiest to implement, as it is set up by default. Since all communication is encrypted, passwords are not available for eavesdroppers.

On a Unix system, password authentication uses the /etc/passwd or /etc/shadow file, depending on how the passwords are set up. The shadow password files can be used on Linux and Solaris servers, but not on HP-UX or AIX servers.

On Windows, password authentication uses the Windows password to authenticate the user at login time.

To enable password authentication on the server, the authentication-methods element of the ssh-server-config.xml file must contain an auth-password element. For example:

<authentication-methods>
  <authentication action="allow">
    <auth-password failure-delay="2" max-tries="3" />
    ...
  </authentication>
</authentication-methods>  

Also other authentication methods can be allowed.

By using selectors, it is possible to allow or require password authentication only for a specified group of users. See the section called “Selectors” for more information.

On Windows, using the SSH Tectia Server Configuration tool, password authentication can be allowed on the Authentication page. See Authentication.

[Note]Note

With passwords, it is also possible to use keyboard-interactive authentication. See Password Submethod for more information.


 

 
PrivX
 

 

 
What to read next:

  • Reduce Secure Shell risk. Get to know the NIST 7966.



    The NISTIR 7966 guideline from the Computer Security Division of NIST is a direct call to action for organizations regardless of industry and is a mandate for the US Federal government.
    Download now
  • ISACA Practitioner Guide for SSH



    With contributions from practitioners, specialists and SSH.COM experts, the ISACA “SSH: Practitioner Considerations” guide is vital best practice from the compliance and audit community.
    Download now