Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[FEATURE] support sshd config PasswordAuthentication=no and ChallengeResponseAuthentication=yes #1186

Open
xianyunleo opened this issue Apr 2, 2024 · 8 comments

Comments

@xianyunleo
Copy link

xianyunleo commented Apr 2, 2024

When the server sshd configuration is PasswordAuthentication = no, ChallengeResponseAuthentication = yes.
In this case, only interactive (e.g., keyboard) password are supported, and plaintext password are not supported

Currently both Navicat and DataGrip support this case. Please support this case

@xianyunleo xianyunleo changed the title [FEATURE] support sshd PasswordAuthentication=no [FEATURE] support sshd config PasswordAuthentication=no Apr 2, 2024
@qishibo
Copy link
Owner

qishibo commented Apr 2, 2024

you can use a private key instead

@xianyunleo
Copy link
Author

我也想用私钥,但是公司的服务器,我没权限改,目前navicat和DataGrip都支持 sshd PasswordAuthentication=no的密文密码连接

@qishibo
Copy link
Owner

qishibo commented Apr 3, 2024

那你平常不用私钥,通过什么登录的

@xianyunleo
Copy link
Author

xianyunleo commented Apr 7, 2024

这台服务器是用,密码登录。
服务器sshd的配置是PasswordAuthentication=no,ChallengeResponseAuthentication=yes。
这种情况下,仅支持交互式(如键盘)输入密码,不支持明文密码

@xianyunleo xianyunleo changed the title [FEATURE] support sshd config PasswordAuthentication=no [FEATURE] support sshd config PasswordAuthentication=no and ChallengeResponseAuthentication=yes Apr 7, 2024
@qishibo
Copy link
Owner

qishibo commented May 23, 2024

是每次从验证器app里获取动态密码填入么

@xianyunleo
Copy link
Author

ChallengeResponseAuthentication指定是否使用“键盘交互”身份验证方案。

从理论上讲,“键盘交互”身份验证方案可以向用户询问多重问题,但是实践中,通常仅询问 Password:,也可以询问 One-time Password

https://zhuanlan.zhihu.com/p/518666339

下面是普通Password验证和ChallengeResponseAuthentication Password验证在终端的表现
88813366f08a447f2f2bbf98dac6af6

9a3d6ef88888cf4f537cadb94f503e5

@qishibo
Copy link
Owner

qishibo commented May 28, 2024

懂了,你在其他APP【如RDM】能正常登陆么,可以截个图我看看他是啥操作么

@xianyunleo
Copy link
Author

RDM不能,IDEA可以,Xshell也可以,Xshell参考这里 https://zhuanlan.zhihu.com/p/518666339

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants