User Authentication with Keyboard-Interactive
Keyboard-Interactive is a generic authentication method that can be used to
implement different types of authentication mechanisms. Any currently
supported authentication method that requires only the user's input can be
performed with Keyboard-Interactive.
Currently, the following methods are supported:
- password
- PAM (see note below)
- RSA SecurID
- RADIUS
Methods that require passing some binary information, such as public-key
authentication, cannot be used as submethods of Keyboard-Interactive.
But public-key authentication, for example, can be used as an additional method
alongside Keyboard-Interactive authentication.
Note: PAM has support for binary messages and client-side agents, and those cannot be
supported with Keyboard-Interactive. However, currently there are no
implementations that take advantage of the binary
messages in PAM, and the specification may not be cast in stone yet.