The password authentication method is the easiest to implement, as it is set up by default. Since all communication is encrypted, passwords are not available for eavesdroppers.
On a Unix system, password authentication uses the
/etc/passwd
or /etc/shadow
file, depending on how
the passwords are set up. The shadow password files can be used on Linux and
Solaris servers, but not on HP-UX or AIX servers.
On Windows, password authentication uses the Windows password to authenticate the user at login time.
To enable password authentication on the server, the
authentication-methods
element of the
ssh-server-config.xml
file must contain an
auth-password
element. For example:
<authentication-methods> <authentication action="allow"> <auth-password failure-delay="2" max-tries="3" /> ... </authentication> </authentication-methods>
Also other authentication methods can be allowed.
By using selectors, it is possible to allow or require password authentication only for a specified group of users. See the section called “Selectors” for more information.
On Windows, using the SSH Tectia Server Configuration tool, password authentication can be allowed on the Authentication page. See Authentication.
Note | |
---|---|
With passwords, it is also possible to use keyboard-interactive authentication. See Password Submethod for more information. |