[
https://issues.apache.org/jira/browse/GUACAMOLE-141?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Mike Jumper updated GUACAMOLE-141:
----------------------------------
Attachment: GUAC-836.patch
> Complete support for keyboard interactive authentication
> --------------------------------------------------------
>
> Key: GUACAMOLE-141
> URL: https://issues.apache.org/jira/browse/GUACAMOLE-141
> Project: Guacamole
> Issue Type: Improvement
> Components: SSH
> Environment: guacamole: all
> SSH server: google-authenticator-libpam 1.03
> Reporter: Roleo Hibachi
> Priority: Minor
> Labels: features, security
> Attachments: GUAC-836.patch
>
>
> SSH servers using two-factor or two-step authentication generally require
> multiple keyboard-interactive prompts. An example is the
> google-authenticator-libpam PAM module; others exist as well. Although
> Guacamole supports keyboard-interactive password authentication for SSH, only
> the first prompt is handled (which is assumed to be the prompt for a
> password).
> Full support for keyboard interactive must be added for two factor SSH
> authentication to work.
> This had been successfully patched previously (GUAC-836 in the old JIRA,
> circa version 0.9.2), but the patch was not implemented in the master branch,
> and so was not maintained. Using the patch on 0.9.10-incubating or 0.9.9
> results in no change in functionality.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
