Auto-login password

[waukeerules]

The new KiTTY 0.71.01 version auto-login behaves differently now. When I attempt to login to a Cisco device the password seems to be sent to the prompt - if I hit the Enter key the login is successful. Before the prompt would read "Send automatic password (Using keyboard-interactive authentication)" and get a hostname prompt.

[Andy2244]

Yeah portableapps.com just updated to 0.71.0.2p and i also have to manually hit enter to login now.

[cyd01]

Please test this beta version: https://www.9bis.net/kitty/data/beta/kitty.exe

[Andy2244]

Still needs a enter, output looks a little different:
Beta:

Using username "root".
Keyboard-interactive authentication prompts from server:
| Password:
            Send automatic password (Using keyboard-interactive authentication)

with enter

Using username "root".
Keyboard-interactive authentication prompts from server:
| Password:
            Send automatic password (Using keyboard-interactive authentication)


Send automatic password (Using keyboard-interactive authentication)
End of keyboard-interactive prompts from server
root@clear-vm-localhost ~ #

vs 0.71

Using username "root".
Keyboard-interactive authentication prompts from server:
| Password:

than enter

Using username "root".
Keyboard-interactive authentication prompts from server:
| Password:
End of keyboard-interactive prompts from server
root@clear-vm-localhost ~ #

[waukeerules]

Just tried the recent 0.71.0.4 update. The misbehavior is still occurring. I still have to hit enter to get a prompt.

Before hitting enter

Using username "admin".
Pre-authentication banner message from server:
|
| Test Banner
|
End of banner message from server
Keyboard-interactive authentication prompts from server:
| Password:
           Send automatic password (Using keyboard-interactive authentication)

After hitting enter

Using username "admin".
Pre-authentication banner message from server:
|
| Test Banner
|
End of banner message from server
Keyboard-interactive authentication prompts from server:
| Password:
           Send automatic password (Using keyboard-interactive authentication)

End of keyboard-interactive prompts from server

Switch#

[waukeerules]

I wanted to point out that this seems to only be affecting Cisco network devices. I manage a handful of Linux servers and CradlePoints that are allowing me to login normally. I decided to poke around the SSH settings and found a temporary workaround for the moment. I am not sure if this work around is a security risk...

Work Around:
Connection > SSH > Auth > uncheck 'Attempt "keyboard-interactive" auth (SSH-2)'

Using username "admin".
Pre-authentication banner message from server:
|
| Test Banner
|
End of banner message from server
t22381@192.168.0.1's password:
Send automatic password

Switch#

[Andy2244]

I wanted to point out that this seems to only be affecting Cisco network devices.

It does not, for me its a ClearLinux VM and a openwrt device that have this behavior, switching to the old version fixes the issue.

[waukeerules]

It does not, for me its a ClearLinux VM and a openwrt device that have this behavior, switching to the old version fixes the issue.

Well, from my perspective it seems that way. Did you try the work around I found?

[Andy2244]

Did you try the work around I found?

Yes this worked for me, yet there is a other problem.
In the old version if i lost connection (reboot of VM or timeout) i could just click in the kitty window and it would automatically reconnect. With the new version this is not working anymore, so for now i will stay on the old version.

[lars18th]

Hi @Andy2244 ,

In the old version if i lost connection (reboot of VM or timeout) i could just click in the kitty window and it would automatically reconnect. With the new version this is not working anymore, so for now i will stay on the old version.

Please check this beta: #23 (comment)
I feel it resolves this particular issue.

Regards.

[Andy2244]

@waukeerules @cyd01 Just got 0.71.0.5p via update and my logins and auto-logins on disconnect now work normally again, so i think this can be closed.

[momala454]

0.71.0.5 still need to press enter on login

[Andy2244]

0.71.0.5 still need to press enter on login

Yeah you also need to change this option to:
Connection > SSH > Auth > uncheck 'Attempt "keyboard-interactive" auth (SSH-2)'

[momala454]

if i uncheck it will disable auto login on this server ?

[Andy2244]

Works for me i see:

Using username "root".
root@clear-vm-localhost.mshome.net's password:
Send automatic password
root@clear-vm-localhost~ #

[waukeerules]

Works for me i see:

Using username "root".
root@clear-vm-localhost.mshome.net's password:
Send automatic password
root@clear-vm-localhost~ #

I can confirm that the work around I proposed a month ago is still required for the auto-login feature to work properly. I tested this in version 0.71.0.6 in portable mode by first deleting init.ini & default settings to make sure I didn't have any other configuration issues affecting my results.

[cesium147]

@cyd01 Please fix trouble with reconnect to Telnet

@cyd01 Yep for SSH, but not for Telnet ;-/

KiTTY telnet reconnect log.txt

[elvisior]

I just tested with 0.71.0.7 and this problem is still there when trying to login to red hat enterprise linux 7 servers for me. I have to hit enter before I can login. It's very frustrating.

[waukeerules]

I'm still having to hit enter before successfully logging into the device. I tested on version 0.72.0.1.

[cesium147]

Telnet reconnect doesn't work either on v0.72.0.1

[cyd01]

I've never been able to reproduce the issue. It's very frustrated. So I'm blind, and it's hard to fix it.
However, I've found something new in PuTTY code, that was reported into 0.71 KiTTY.
I've made a modification. Can someone test this debug build ?

[cesium147]

Can someone test this debug build ?

On Telnet reconnect keyboard input will be disabled, but login/password was not submitted because without login-script auto-login is not possible and just need to enable keyboard input to manual login.
putty-telnet.log, KiTTY telnet eventlog.txt

But on Telnet reconnect not play login-script, if it's used!

SSH on my case work fine
putty-ssh.log

[waukeerules]

Debug build had the same behavior. Would it be of value to do a screenshare to diagnose the issue? I don't see any debug output that I can send you from this KiTTY version.

[elvisior]

I've debugged this a bit.. (it took ages to get mingw build environment working.. the instructions for that suck)...

How I did it..

Install cygwin (because I already had that and use it a lot)...
Grab MingW get from here:
https://osdn.net/projects/mingw/releases/p15522
Install all of the optional packages that is suggests (I think there are 6).
Open a cygwin bash session.
Set your path so it can find the MingW versions of things first:
export PATH=/cygdrive/c/MinGW/bin:/cygdrive/c/MinGW/msys/1.0/bin:$PATH

Then clone and built kitty:
git clone https://github.com/cyd01/KiTTY.git
cd KiTTY/0.72_My_PuTTY/windows/
make -f MAKEFILE.MINGW putty.exe

I have two ssh servers exhibiting different behaviour. One works fine with the auto login password and another does not.

The difference is that the one that doesn't work outputs these lines about Keyboard-Interactive ..

Using username "myUsernameSucks".
Pre-authentication banner message from server:
just another stupid banner
End of banner message from server
Keyboard-interactive authentication prompts from server:
| Password:
Send meow automatic password (Using keyboard-interactive authentication)

Send meow automatic password (Using keyboard-interactive authentication)
End of keyboard-interactive prompts from server

I added the meow to ssh2userauth.c on line 1389 to try and work out what's going on.

The server that works doesn't hit that code at all.
It goes like this:

Using username "noThanks".
Pre-authentication banner message from server:
another stupid banner
|
End of banner message from server
noThanks@1.1.1.1's password:
Send automatic password
Last login: Sat Sep 14 13:06:00 2019 from ....

I'm pretty keen to see this bug fixed, it's driving me mental hitting enter all the time.

[cyd01]

There are two different password authentication into PuTTY code. Line 1389: the part that does not work ( Send automatic password (Using keyboard-interactive authentication) Line 1559: the part that works (Send automatic password) It seems my servers only ask for the second one, that why I could not reproduce. I use centos 7/redhat 7 machines from AWS or Private Openstack cloud, and Ubuntu 16 from public Openstack (OVH). What are your servers that provide the first authentication method ? Le sam. 14 sept. 2019 à 05:27, elvisior <notifications@github.com> a écrit :

…

I've debugged this a bit.. (it took ages to get mingw build environment working.. the instructions for that suck)... How I did it.. Install cygwin (because I already had that and use it a lot)... Grab MingW get from here: https://osdn.net/projects/mingw/releases/p15522 Install all of the optional packages that is suggests (I think there are 6). Open a cygwin bash session. Set your path so it can find the MingW versions of things first: export PATH=/cygdrive/c/MinGW/bin:/cygdrive/c/MinGW/msys/1.0/bin:$PATH Then clone and built kitty: git clone https://github.com/cyd01/KiTTY.git cd KiTTY/0.72_My_PuTTY/windows/ make -f MAKEFILE.MINGW putty.exe I have two ssh servers exhibiting different behaviour. One works fine with the auto login password and another does not. The difference is that the one that doesn't work outputs these lines about Keyboard-Interactive .. Using username "myUsernameSucks". Pre-authentication banner message from server: just another stupid banner End of banner message from server Keyboard-interactive authentication prompts from server: | Password: Send meow automatic password (Using keyboard-interactive authentication) Send meow automatic password (Using keyboard-interactive authentication) End of keyboard-interactive prompts from server I added the meow to ssh2userauth.c on line 1389 to try and work out what's going on. The server that works doesn't hit that code at all. It goes like this: Using username "noThanks". Pre-authentication banner message from server: another stupid banner | End of banner message from server ***@***.***'s password: Send automatic password Last login: Sat Sep 14 13:06:00 2019 from .... I'm pretty keen to see this bug fixed, it's driving me mental hitting enter all the time. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#16?email_source=notifications&email_token=AIESOBSL4UNQETKSYYYLD3LQJRK3XA5CNFSM4HOWMO3KYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOD6WTFKA#issuecomment-531444392>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AIESOBUQENYPAY3USWBJBATQJRK3XANCNFSM4HOWMO3A> .

[waukeerules]

I just tested version 0.72.0.3. I think you resolved the issue. Can anyone else confirm?

[cyd01]

As I was finally able to reproduce (thanks for the Azure hint), it could be easier to fix it.