[ 
https://issues.apache.org/jira/browse/GUACAMOLE-1707?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17627378#comment-17627378
 ] 

Cryptage commented on GUACAMOLE-1707:
-------------------------------------

Thanks for your help.

I've double-checked and there's no problem with the private key, it's working 
perfectly on other hosts.
It's not working with Guacamole because of this SSH option :
{code:java}
AuthenticationMethods publickey,keyboard-interactive {code}
If I remove it, I won't get the "public key authentication failed" error but 
2FA is not working at all (AuthenticationMethods is mandatory with publickey).

I'll have a look at mailing lists if it could help.

 

 

> Unable to connect to SSH client using TOTP (Google Authenticator)
> -----------------------------------------------------------------
>
>                 Key: GUACAMOLE-1707
>                 URL: https://issues.apache.org/jira/browse/GUACAMOLE-1707
>             Project: Guacamole
>          Issue Type: Bug
>          Components: guacamole
>    Affects Versions: 1.4.0
>         Environment: Guacamole 1.4.0
> Debian 11
> MariaDB 10.5
> Jetty 9
>            Reporter: Cryptage
>            Priority: Major
>              Labels: 2fa, Linux, authentication, ssh, totp
>
> Hi guys,
> I hope this issue doesn't exist (couldn't find similar).
> I have a problem with Guacamole 1.4.0 and SSH.
> On some Linux hosts I'm using SSH with 2FA (password + Google Authenticator 
> or most frequently publickey + Google Authenticator).
> Guacamole asks for password or passphrase when we connect to SSH then fails 
> with "Log in failed. Please reconnect and try again".
> It never asks for verification code.
> In log files :
> {code:java}
> Public key authentication failed: Invalid signature for supplied public key, 
> or bad username/public key combination
> ERROR:        Public key authentication failed: Invalid signature for 
> supplied public key, or bad username/public key combination {code}
> I've checked in documentation, mailing list and Jira but couldn't find an 
> answer.
> Is there a way to get 2FA working with SSH connections ?
> Thanks for your help and congrats for this amazing tool.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to