Keyboard-interactive is a generic authentication method that can be used to implement different types of authentication mechanisms. Any currently supported authentication method that requires only the user's input can be performed with keyboard-interactive.
Currently, the following methods are supported:
password
PAM (Unix only, see note below)
RSA SecurID
RADIUS
With the current version of SSH Tectia Server on Windows, password, RADIUS, and RSA SecurID authentication can be performed over keyboard-interactive. In the future, it may be possible to use keyboard-interactive also with other authentication methods.
Methods that require passing some binary information, such as public-key authentication, cannot be used as submethods of keyboard-interactive. But public-key authentication, for example, can be used as an additional method alongside keyboard-interactive authentication.
Note | |
---|---|
PAM has support for binary messages and client-side agents, and those cannot be supported with keyboard-interactive. However, currently there are no implementations that take advantage of the binary messages in PAM, and the specification may not be cast in stone yet. |