Authenticate an Inbound Node by Comparing Both a Password and a Key to the Local User Store

Edit online

About this task

This scenario builds on the Basic SFTP Configuration by adding support for both key and password authentication of the inbound connection. The inbound node must present both a key and a password and both must be authenticated for a communications session to be established.

You must add the password and key information to the user definition in the local user store before you can test this scenario. Refer to Create an Engine User Account for instructions on creating a user account and assigning a password. Refer to Add SSH Keys to a User Account for instructions on adding a key to a user account definition.

To add support for password and key authentication:

Procedure

  1. From IBM Sterling Secure Proxy, select Configuration from the left hand-side navigation panel.
  2. Click Policies, then in the SFTP Forward Proxy Policy tile, click View Policies to display the list of created SFTP Forward Proxy Policies.
  3. Choose the policy you wish to edit, then click on the Edit icon.
  4. Click the Advanced tab.
  5. Select Password and Key as the Required Authentication Method.
  6. Enable the User Authentication: Through Local User Store option.
  7. External Credentials Mapping configuration options:
    1. If From Netmap is selected under External Credentials then configure below.

      Click Netmap under Configuration and click View Netmaps of SFTP Forward Proxy tile > Edit Netmap that is configured.

      Select Outbound Nodes > Edit Outbound node name > select Advanced tab > Fill in the Userid and password of the remote server.

  8. Click Save.
  9. After you configure user authentication using both key and password information, validate the configuration by establishing a session initiated by an SFTP client to an SFTP server.