Re: keyboard-interactive only authentication

On Mon, Feb 27, 2006 at 01:59:20AM -0800, ike wrote:
how can i configure my openssh to accept only
keyboard-interactive logins?
if i specify PasswordAuthentication no then my ssh
client says No supported authentication methods left
to try!

You need enable ChallengeResponseAuthentication in sshd_config and
make sure that at least one challenge-response method is compiled in
(eg PAM, which also needs to be enabled in sshd_config).

You also need to make sure that your client is configured to try
keyboard-interactive authentication (for OpenSSH this is
ChallengeResponseAuthentication and PreferredAuthentications in
the client config files, other clients may have similar options).

--
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4 37C9 C982 80C7 8FF4 FA69
Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.

Relevant Pages