Re: [Jailkit-users] Question on keyboard interactive versus password authentication

[Olivier Sessink]

Al Sheldon wrote:
> My default setup of Jailkit on a Suse Linux 9.3 has 
> PasswordAuthentication set to no.  I have a vendor who has struggled 
> with connecting to our SFTP site until they realized that password 
> authentication was set to no and that they needed to utilize 
> keyboard-interactive.  They have requested I set PasswordAuthentication 
> to yes.  I have researched this and the only negative I see is that it 
> may allow the user to change their password if I turn on 
> PasswordAuthentication as a method to connect.   This is sufficient for 
> me to leave it off, however I would like to know if there are any other 
> consequences to turning it on (to have more reasons to leave it off) and 
> is this the only way to make password authentication function?

keyboard-interactive == password authentication, right? perhaps I'm too 
jet-lagged, but at this moment I know of two mechanisms in ssh, which is 
logging in with a server-side known key, or with a password.. I guess 
I'm too jet-lagged, because I don't really understand the question..

Olivier