Re: sftp using both ssh key and password authentication

Jay,

The sftp command in PASE is part of the OpenSSH suite.  The question shouldn't be "can IBM i?" it should be "can OpenSSH?"  It isn't a question about the operating system, after all.

I've never done this before, nor seen someone do it.  But  with Google I found a discussion about it from 2018 https://askubuntu.com/questions/1019999/key-based-ssh-login-that-requires-both-key-and-password This discussion includes setup for the server-side of the connection.  There doesn't seem to be any setup needed on the client side.

For the client side, you just use the ssh command (I would expect sftp to do the same thing -- sftp is really just a different interface to ssh) and if the key is set up properly, it will send the key as well as prompt for the password.   Then you just need to set up your Expect script to handle the prompt.

-SK

On 9/6/24 7:53 AM, Jay Vaughn wrote:

SK - I was anticipating your email reply but never saw it come through.
apologies for that... I'll go back and look for it.

So clarity from the customer states... it is definitely both ssh key auth
AND password authentication... Even showed me how WinSCP can do it...
So can the IBM i?

Winscp shows this... (can't attach image so...)...

Searching for host...
connecting to host...
Authenticating...
Using userName "blah".
Authenticating with public key "blah@xxxxxxxx"
Further authentication required
Authenticating with pre-entered password
Authenticated
Starting the session...

So... can the IBM i do this as an sftp client?

thanks

Jay