sshy key issue

mokku · 03-27-2008, 10:20 AM

I'm using sshtectia and for my SFTP and works fine, but some times fail and gives this error in authlog.

The client requested authentication method `keyboard-interactive', that is not allowed for user `apftp'.

The client requested authentication method `password', that is not allowed for user `apftp'.

It works after a while. what may be the problem?

Tinkster · 03-28-2008, 10:20 PM

Who is user apftp, and which authentication methods is he
supposed to be using? Does he always connect from the same
machine?

Cheers,
Tink

sundialsvcs · 03-28-2008, 10:24 PM

ssh allows a series of authentication-methods to be defined and (unfortunately...) it will try each one in decreasing order of rigor until it either "finds one that works" or it runs out of options.

(It can actually wind up almost like "okay, I see that you don't have a key, so I'll just let you in anyway...")

Basically, you need to configure your ssh client and server so that they recognize only the authentication-methods that you intend to allow and refuse all the others. You need to be sure to do both, because ssh is "a bit too 'agreeable.'"

mokku · 03-29-2008, 06:52 AM

Thanks a lot for the reply. SSH key has been copied and works most of the time and this error comes some times. Can I just force this user to use only SSH key? If so, how can I do it? Thanks in advance.

mokku · 03-30-2008, 09:05 PM

Can we setup authentication methods for a specific user?

Tinkster · 03-30-2008, 10:12 PM

You'll need to consult the tectia documentation to answer this question,
I'm afraid. I've never used it. Sorry.

Cheers,
Tink