Re: sftp using both ssh key and password authentication

[Scott Klement <midrange-l@xxxxxxxxxxxxxxxx>]

Jay,

The sftp command in PASE is part of the OpenSSH suite.  The question 
shouldn't be "can IBM i?" it should be "can OpenSSH?"  It isn't a 
question about the operating system, after all.

I've never done this before, nor seen someone do it.  But  with Google I 
found a discussion about it from 2018 
https://askubuntu.com/questions/1019999/key-based-ssh-login-that-requires-both-key-and-password 
This discussion includes setup for the server-side of the connection.  
There doesn't seem to be any setup needed on the client side.

For the client side, you just use the ssh command (I would expect sftp 
to do the same thing -- sftp is really just a different interface to 
ssh) and if the key is set up properly, it will send the key as well as 
prompt for the password.   Then you just need to set up your Expect 
script to handle the prompt.

-SK

On 9/6/24 7:53 AM, Jay Vaughn wrote:
> SK - I was anticipating your email reply but never saw it come through.
> apologies for that... I'll go back and look for it.
>
> So clarity from the customer states... it is definitely both ssh key auth
> AND password authentication... Even showed me how WinSCP can do it...
> So can the IBM i?
>
> Winscp shows this... (can't attach image so...)...
>
> Searching for host...
> connecting to host...
> Authenticating...
> Using userName "blah".
> Authenticating with public key "blah@xxxxxxxx"
> Further authentication required
> Authenticating with pre-entered password
> Authenticated
> Starting the session...
>
> So... can the IBM i do this as an sftp client?
>
> thanks
>
> Jay