Hi, It's the first time I use mailing lists so I hope I won't make mistake. I need your help with SSH connection using 2FA (Google Authenticator) on Guacamole.
I'm unable to connect to Linux clients. I get "Log in failed. Please reconnect and try again" after writing the passphrase. I've checked log files and I have this error : Public key authentication failed: Invalid signature for supplied public key, or bad username/public key combination ERROR: Public key authentication failed: Invalid signature for supplied public key, or bad username/public key combination There's no problem with private key. This error is due to this SSH option : AuthenticationMethods publickey,keyboard-interactive If I remove it, I don't have this error message anymore but 2FA is not working, I'm directly connected just after entering the passphrase. It seems mandatory to make 2FA work with publickey. I'm using Debian 11 / MariaDB 10.5 / Jetty 9 and Guacamole 1.4.0 Changes in "/etc/pam.d/sshd" file : # @include common-auth (also tried activated) auth required pam_google_authenticator.so Changes in "/etc/ssh/sshd_cnfig" file : PermitRootLogin prohibit-password (also tried without-password) ChallengeResponseAuthentication yes UsePAM yes PasswordAuthentication no (also tried yes) AuthenticationMethods publickey,keyboard-interactive Is there a way to get SSH working on Guacamole with 2FA enabled ? Thanks for your help.
