Score:0

How to administrate Server with Apache Guacamole RDG per ssh with TOTP enabled?

gn flag

I set up an Apache Guacamole server (v1.4.0) on Ubuntu 22.04 LTS. The modules guacamole-auth-jdbc-mysql.jar, guacamole-auth-ldap.jar and guacamole-auth-totp.jar are also installed. The openssh-server, tomcat9 and java (openjdk-17) were installed from the apt repositories. All connections to my servers work (RDP, VNC, SSH without TOTP), with the exception of my ssh connections, which are additionally secured via totp (google-authenticator). Is it possible to establish a connection somehow or is there a way to enter a 2FA directly with the password so that only one prompt is necessary (like <password>#<otp>)? I want to explicitly use a one-time password and not an ssh key.

The error message on the target system in the auth.log is as follows:

Jan 25 10:19:58 <ssh-server> sshd[271678]: Connection from xxx.xxx.xxx.xx1 port xxxx on xxx.xxx.xxx.xx2 port 22 rdomain ""
Jan 25 10:20:04 <ssh-server> sshd[271678]: Postponed keyboard-interactive for <user> from xxx.xxx.xxx.xx1 port xxxx ssh2 [preauth]
Jan 25 10:20:04 <ssh-server> sshd[271716]: pam_krb5(sshd:auth): user <user> authenticated as <user>@<domain>
Jan 25 10:20:04 <ssh-server> sshd[271678]: Postponed keyboard-interactive/pam for <user> from xxx.xxx.xxx.xx1 port xxxx ssh2 [preauth]
Jan 25 10:20:04 <ssh-server> sshd(pam_google_authenticator)[271716]: Invalid verification code for <user>
Jan 25 10:20:04 <ssh-server> sshd[271678]: error: PAM: Authentication failure for <user> from xxx.xxx.xxx.xx1
Jan 25 10:20:04 <ssh-server> sshd[271678]: Failed keyboard-interactive/pam for <user> from xxx.xxx.xxx.xx1 port xxxx ssh2
Jan 25 10:20:04 <ssh-server> sshd[271678]: Connection closed by authenticating user <user> xxx.xxx.xxx.xx1 port xxxx [preauth]

Thank you in advance...

Score:0
gn flag

For those who are interested: simply apply the following patch before compiling by simply editing the source code.

https://github.com/apache/guacamole-server/pull/304/commits

It is for an older version, but also works for the current version 1.4.0.

I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.