https://bugs.kde.org/show_bug.cgi?id=524529
Bug ID: 524529
Summary: KIO SFTP hides SSH server authentication instructions
and Tailscale check-mode URL
Classification: Frameworks and Libraries
Product: kio-extras
Version First 25.12.2
Reported In:
Platform: Other
OS: Linux
Status: REPORTED
Severity: normal
Priority: NOR
Component: SFTP
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: ---
Created attachment 195326
--> https://bugs.kde.org/attachment.cgi?id=195326&action=edit
screenshot with error before using auth via terminal
SUMMARY
When opening an SFTP URL backed by Tailscale SSH while Tailscale check-mode
re-authentication is required, Dolphin/KIO reports that the server offered no
authentication methods. It hides the server's actionable authentication message
and browser URL.
STEPS TO REPRODUCE
1. Configure a Tailscale SSH rule with "action": "check".
2. Wait until check-mode re-authentication is required.
3. Open sftp://core@ucore/ in Dolphin.
4. Observe the authentication error.
5. Run ssh core@ucore in a terminal.
ACTUAL RESULT
Dolphin displays:
Authentication failed. The server didn't send any authentication methods.
The authentication instructions sent by the SSH server are not displayed.
Running OpenSSH for the same host shows:
Tailscale SSH requires an additional check.
To authenticate, visit: https://login.tailscale.com/a/...
After visiting that URL and completing authentication, SFTP in Dolphin works
normally.
EXPECTED RESULT
KIO should preserve and display actionable messages sent by the SSH server
before the authentication failure, including the authentication URL. URLs in
such messages should ideally be clickable.
This should be implemented generically rather than by special-casing
Tailscale, so other SSH gateways using browser-based authentication also
benefit.
SOFTWARE/OS VERSIONS
Dolphin: 25.12.2
ADDITIONAL INFORMATION
Tailscale documents this behavior as SSH check mode:
https://tailscale.com/docs/features/tailscale-ssh#configure-tailscale-ssh-with-check-mode
Related Tailscale usability issue concerning a hidden authentication URL:
https://github.com/tailscale/tailscale/issues/7589
The attached screenshot shows Dolphin's error and the authentication
instruction produced by ssh for the same host.
--
You are receiving this mail because:
You are watching all bug changes.
