Xstart User Authentication Settings

To Set Password or Keyboard Interactive:

1. Run Xstart.
2. Select Password or Keyboard Interactive in [Authentication] and click [Setup]. The Password Setup dialog box is displayed.
3. Enter password.
4. Select [Save password] and click [OK] to save the entered password in the session.
5. To remove the password, click [Reset password].

• Note
  Keyboard Interactive authentication works by entering the required value in the message sent from the SSH server. It is typically used when the password changes often or if OTP is utilized. Unless otherwise specified by the server, the initial password value is the same as the user account's password.

To Set Public Key:

1. Run Xstart.
2. Select Public Key in [Authentication] and click [Setup]. The Public Key Authentication Setup dialog box is displayed.
3. Select a user key to use in authentication.
4. Enter passphrase.

• Note
  For more information on public key settings, see 'Public Key User Authentication'.
  For maximum security, directly enter a passphrase upon each connection instead of saving it in a session. When opting to enter the password each time, the 'SSH User Authentication Dialog Box' will prompt for a password when attempting to connect. 

To Set Kerberos: Xmanager supports MIT Kerberos and Microsoft's SSPI. This article assumes that you have a working Kerberos server and client. When this session opens, it will attempt to use the Kerberos credentials for the specified user. It must be the same user you defined in the Network Identity Manager.

1. Run Xstart.
2. For [Authentication], select GSSAPI and click [Setup]. The Setup GSSAPI dialog box appears.
3. Select the type of GSSAPI authentication to use.

• Note
  If the PC running Xxmanager is utilizing an Xmanager supported Kerberos module, Xmanager can only automatically authenticate to the SSH server if GSSAPI authentication is selected. To connect to another server using Kerberos authentication from a server using Kerberos authentication, select the 'Allow GSSAPI credential delegation' option.

To set PKCS #11:

1. Run Xstart.
2. For [Authentication], select PKCS#11 and click [Setup]. The Setup PKCS#11 dialog box appears.
3. Enter the path of the middleware program that can connect to the hardware token that contains the user key. Or click […] to browse for it.
4. If the pin number is set in the hardware token, enter the pin number.