[GUACAMOLE-1707] Unable to connect to SSH client using TOTP (Google Authenticator)

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 1.4.0
• Component/s: guacamole
• Labels: 2fa Linux authentication ssh totp
• Environment: Guacamole 1.4.0 ; Debian 11 ; MariaDB 10.5 ; Jetty 9
• Assignee: Unassigned
• Reporter: Cryptage
• Created: 01/Nov/22 20:45
• Updated: 02/Nov/22 00:06
• Resolved: 01/Nov/22 22:13

Description

Hi guys,

I hope this issue doesn't exist (couldn't find similar).
I have a problem with Guacamole 1.4.0 and SSH.

On some Linux hosts I'm using SSH with 2FA (password + Google Authenticator or most frequently publickey + Google Authenticator).

Guacamole asks for password or passphrase when we connect to SSH then fails with "Log in failed. Please reconnect and try again".

It never asks for verification code.

In log files :

Public key authentication failed: Invalid signature for supplied public key, or bad username/public key combination

ERROR:        Public key authentication failed: Invalid signature for supplied public key, or bad username/public key combination 

I've checked in documentation, mailing list and Jira but couldn't find an answer.

Is there a way to get 2FA working with SSH connections ?

Thanks for your help and congrats for this amazing tool.

Issue Links

• duplicates: GUACAMOLE-141 Complete support for keyboard interactive authentication