Uploaded image for project: 'Guacamole'
  1. Guacamole
  2. GUACAMOLE-547

Add support for the "none" SSH authentication method

    XMLWordPrintableJSON

    Details

    • Type: New Feature
    • Status: Resolved
    • Priority: Minor
    • Resolution: Implemented
    • Affects Version/s: None
    • Fix Version/s: 1.1.0
    • Component/s: Documentation, SSH
    • Labels:
      None
    • Environment:
      Linux 4.13.0-1012-azure #15-Ubuntu SMP Thu Mar 8 10:47:27 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux

      Description

      When connecting to embedded devices that implicitly allow SSH access guacd fails when the authentication method is (none).  The devices permit any SSH user with no password access to the console, and then provide authentication internally via their interactive shell.

      Test cases:

      1. no username and no password configured:  Guacamole requests both, then fails to connect.
      2. username but no password:  Guacamole requests password, and then fails to connect.
      3. username and password:  Guacamole asks for no input, and then fails to connect.

      I've attached guacd debug logs from the failed connection attempts, plus OpenSSH  (-vv) logs from a successful connection.  (Files have been suitably redacted).  The bit they share in common is they both state "Authentication (none)" but OpenSSH proceeds with the connection, while guacd terminates the connection:

      Guacd:

      guacd[100079]: DEBUG: Successfully connected to host 192.168.233.20, port 22
      guacd[100079]: DEBUG: Supported authentication methods: (null)
      guacd[100066]: INFO: Connection "$abc52848-a11c-4397-a657-7c2d4bfdb5e9" removed.

       OpenSSH:

      debug1: SSH2_MSG_SERVICE_ACCEPT received
      debug1: Authentication succeeded (none).
      Authenticated to 192.168.233.20 ([192.168.233.20]:22).
      debug1: channel 0: new [client-session]
      debug2: channel 0: send open
      

        Attachments

        1. openssh_verbose_successful connection.txt
          8 kB
          David Hauk
        2. guacd_debug_fail.txt
          2 kB
          David Hauk
        3. sshd_config
          3 kB
          Federico Giuba
        4. guacd-master.log
          5 kB
          Federico Giuba
        5. guacd-1.0.0.log
          5 kB
          Federico Giuba

          Activity

            People

            • Assignee:
              mjumper Mike Jumper
              Reporter:
              haukeness David Hauk
            • Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: