[psamman]

Hello,

Is there a way of offering to an SFTP client the possibility to authenticate via login/password or public key, at his discretion.

Both authentication methods work, but exclusively.
I tried all possible combinations between login/password and public key fields in the Remote Site and the CGate configuration, but the second a password is present anywhere, no public key authentication is possible anymore.

It would be great if we could offer our client the possibility to use any, at will.

What's disturbing is that when I define no public key for authentication, and the client sends a public key, he is rejected. Can the Gateway at least be made to ignore sent public keys and prompt for password in this case?

Thx.

[FranckJ]

Hello psaman ,
unfortunately it is not possible to allow the same incoming SFTP account to use public key or password, the Cgate has to be configured to one or the other. Therefore even if it is possible to allow both at the security profile level a single user will have to use the method defined for him (or her) at the Cgate level.
The best practice is to discuss with your partner what method he/she wishes to use and set that method at the Cgate level.
If a partner absolutely requires both then you'll have to create to distinct SFTP Cgates with different logins.
Regards,
Franck.

[psamman]

Franck: thank you for your clear answer and advise.
We ended up agreeing on using public keys only as you suggest.