On Sun, 2025-07-20 at 21:38 +0000, Gilmar Brasil Junior wrote:
Hello everyone!
I have Guacamole 1.5.5 with some SSH connections set up. I have used 
libpam-google-authenticator in order to have MFA for SSHing into my Linux 
Servers.
When I try to connect to them I'm disconnect right after typing my password so 
it does not prompt me to enter my 'Verfication code'.
Have you guys faced this issue or behavior?
Cheers!

Sent with Proton Mail<https://proton.me/mail/home> secure email.


Hi

Without Guacamole, adding MFA is a great idea for ssh and you get something you 
have and something you know security .

Now you have Guacamole you have another authentication thing is in front of 
your ssh.  Now it no longer makes sense to do MFA for ssh but do the MFA on 
Guacamole.

I suggest you switch to passwordless or password auth, without MFA for ssh and 
consider requiring access from the IP address of your Guacamole server.  Put 
the MFA on the Guacamole box - there are loads of really decent options.

Cheers
Jon

Reply via email to