https://bugzilla.mindrot.org/show_bug.cgi?id=3864
Damien Miller <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |[email protected] --- Comment #1 from Damien Miller <[email protected]> --- Could you attach a debug log from "ssh -vvv user@host" The fundamental problem here is that we don't know beforehand whether a FIDO operation is going to succeed before we try it, and most FIDO operations block. So we have to show the warning, but in some bases the token returns immediately with a failure and we have to retry, which causes a 2nd notification to be shown. E.g. in your case, it tries once initially. The token is probably replying with the error status "needs user verification" (i.e. PIN) and so we retry with the PIN and it succeeds. If this is the situation, then fixing it is pretty tricky. We haven't figured out a nice way to do it yet. -- You are receiving this mail because: You are watching someone on the CC list of the bug. You are watching the assignee of the bug. _______________________________________________ openssh-bugs mailing list [email protected] https://lists.mindrot.org/mailman/listinfo/openssh-bugs
