On Mon, Feb 27, 2006 at 01:59:20AM -0800, ike wrote:
> how can i configure my openssh to accept only
> keyboard-interactive logins?
> if i specify PasswordAuthentication no then my ssh
> client says No supported authentication methods left
> to try!
You need enable ChallengeResponseAuthentication in sshd_config and
make sure that at least one challenge-response method is compiled in
(eg PAM, which also needs to be enabled in sshd_config).
You also need to make sure that your client is configured to try
keyboard-interactive authentication (for OpenSSH this is
ChallengeResponseAuthentication and PreferredAuthentications in
the client config files, other clients may have similar options).
--
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4 37C9 C982 80C7 8FF4 FA69
Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.
