SSH adapter keyboard-interactive capabilities
Keyboard-interactive (KBI) authentication is a form of authentication for SSH that mimics the process of keyboard interaction, sending authentication information in the SSH server's request. SSH KBI adapter uses user name and password information for authentication.
The authentication involves the server sending prompts to the client computer, which must respond correctly. When the server sends the list of prompts that require responses, the client computer searches for each prompt in the list of loaded prompts, looking in the request file or the configuration file. The client computer then sends the set of responses back to the server. If the expected responses are supplied, the authentication succeeds. You must configure the host to support KBI as an authentication method before configuring the adapter.
To configure the host to support KBI authentication method
- Edit the /etc/ssh/sshd_config server configuration file.
- Change the KbdInteractiveAuthentication parameter to yes.
KbdInteractiveAuthentication specifies whether to allow authentication using the KBI authentication method. You must set the value of this parameter to yes. - (optional) Change the ChallengeResponseAuthentication attribute to yes.
On some systems, setting ChallengeResponseAuthentication to yes enables the KBI authentication method on the host.
- Change the KbdInteractiveAuthentication parameter to yes.
- Restart sshd service on the host using the service sshd restart command.