1-28After the configuration, the subsequent authentications are implemented automatically withoutasking you to enter the password.z Password-publickey authentication takes the advantages of both the password authentication andpublickey authentication. An SSH user must pass both types of authentication before logging in.The combination of password and publickey authentications eliminates the vulnerability of the SSHserver caused by the clients. You can use password-publickey authentication together with AAA forauthentication and authorization of users.You need to specify the authentication mode for an SSH user. Otherwise, the user will not be able to login to the SSH server.Related commands: display ssh user-information.Examples# Specify the publickey authentication for SSH users.system-viewSystem View: return to User View with Ctrl+Z.[Sysname]ssh user kk authentication-type publickey# Display the SSH user information.[Sysname] display ssh user-information kkUsername Authentication-type User-public-key-name Service-typekk publickey null stelnetssh user service-typeSyntaxssh user username service-type { stelnet | sftp | all }undo ssh user username service-typeViewSystem viewParametersusername: SSH user name, a string of 1 to 184 characters. It cannot contain any of these characters:slash (/), backslash (\), colon (:), asterisk (*), question mark (?), less than sign (<), greater than sign (>),and the vertical bar sign (|). In addition, the @ sign can appear up to once, the username part (that is,the string before the @ sign) cannot be more than 55 characters, and the domain name part cannot bemore than 128 characters.stelnet: Specifies the service type of secure Telnet..sftp: Specifies the service type as secure FTP..all: Specifies both secure Telnet and secure FTP.
