Bugzilla – Attachment 3408 Details for
Bug 3178
When authenticating with a -sk key via agent, no 'touch security key' prompt displayed
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
Annotated log of ssh -v demonstrating the issue
ssh_log.txt (text/plain), 3.51 KB, created by
Kane
on 2020-06-08 06:11:50 AEST
(
hide
)
Description:
Annotated log of ssh -v demonstrating the issue
Filename:
MIME Type:
Creator:
Kane
Created:
2020-06-08 06:11:50 AEST
Size:
3.51 KB
patch
obsolete
>$ ssh -v [[ALIAS]] -i ~/.ssh/id_ecdsa_sk >OpenSSH_8.2p1 Ubuntu-4, OpenSSL 1.1.1f 31 Mar 2020 >debug1: Reading configuration data /home/kane/.ssh/config >debug1: /home/kane/.ssh/config line 7: Applying options for mchome >debug1: Reading configuration data /etc/ssh/ssh_config >debug1: /etc/ssh/ssh_config line 19: include /etc/ssh/ssh_config.d/*.conf matched no files >debug1: /etc/ssh/ssh_config line 21: Applying options for * >debug1: Connecting to [[HOSTNAME]] [[IP]] port [[PORT]]. >debug1: Connection established. >debug1: identity file /home/kane/.ssh/id_ecdsa_sk type 10 >debug1: identity file /home/kane/.ssh/id_ecdsa_sk-cert type -1 >debug1: Local version string SSH-2.0-OpenSSH_8.2p1 Ubuntu-4 >debug1: Remote protocol version 2.0, remote software version OpenSSH_8.2p1 Ubuntu-4 >debug1: match: OpenSSH_8.2p1 Ubuntu-4 pat OpenSSH* compat 0x04000000 >debug1: Authenticating to [[HOSTANAME]]:[[PORT]] as '[[USER]]' >debug1: SSH2_MSG_KEXINIT sent >debug1: SSH2_MSG_KEXINIT received >debug1: kex: algorithm: curve25519-sha256 >debug1: kex: host key algorithm: ecdsa-sha2-nistp256 >debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none >debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none >debug1: expecting SSH2_MSG_KEX_ECDH_REPLY >debug1: Server host key: ecdsa-sha2-nistp256 SHA256:xX3w8yz5eyftlQYVbxpWYBhuEt8TP3LkPOu+OPuB5HQ >debug1: Host '[[HOSTNAME]]:[[PORT]]' is known and matches the ECDSA host key. >debug1: Found key in /home/kane/.ssh/known_hosts:4 >debug1: rekey out after 134217728 blocks >debug1: SSH2_MSG_NEWKEYS sent >debug1: expecting SSH2_MSG_NEWKEYS >debug1: SSH2_MSG_NEWKEYS received >debug1: rekey in after 134217728 blocks >debug1: Will attempt key: /home/kane/.ssh/id_ecdsa_sk ECDSA-SK SHA256:1bjhZUm1GLemKIhbwX33nP4zpLuW3VBPdH9kN1LH0bU explicit authenticator agent >debug1: Will attempt key: [[REDACTED]] agent >debug1: Will attempt key: [[REDACTED]] agent >debug1: SSH2_MSG_EXT_INFO received >debug1: kex_input_ext_info: server-sig-algs=<ssh-ed25519,sk-ssh-ed25519@openssh.com,ssh-rsa,rsa-sha2-256,rsa-sha2-512,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ecdsa-sha2-nistp256@openssh.com> >debug1: SSH2_MSG_SERVICE_ACCEPT received >debug1: Authentications that can continue: publickey >debug1: Next authentication method: publickey >debug1: Offering public key: /home/kane/.ssh/id_ecdsa_sk ECDSA-SK SHA256:1bjhZUm1GLemKIhbwX33nP4zpLuW3VBPdH9kN1LH0bU explicit authenticator agent >debug1: Server accepts key: /home/kane/.ssh/id_ecdsa_sk ECDSA-SK SHA256:1bjhZUm1GLemKIhbwX33nP4zpLuW3VBPdH9kN1LH0bU explicit authenticator agent >[[ >At this point, the exchange hangs until I touch the security key. >]] >Authenticated with partial success. >debug1: Authentications that can continue: keyboard-interactive >debug1: Next authentication method: keyboard-interactive >debug1: Authentication succeeded (keyboard-interactive). >Authenticated to [[HOSTNAME]] ([[IP]]:[[PORT]]). >debug1: channel 0: new [client-session] >debug1: Requesting no-more-sessions@openssh.com >debug1: Entering interactive session. >debug1: pledge: network >debug1: client_input_global_request: rtype hostkeys-00@openssh.com want_reply 0 >debug1: Remote: /[[REDACTED]]/.ssh/authorized_keys:19: key options: agent-forwarding port-forwarding pty user-rc x11-forwarding >debug1: Remote: /[[REDACTED]]/.ssh/authorized_keys:19: key options: agent-forwarding port-forwarding pty user-rc x11-forwarding >debug1: Sending environment. >debug1: Sending env LANG = en_US.UTF-8 >Welcome to Ubuntu 20.04 LTS (GNU/Linux 5.4.0-33-generic x86_64) >
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 3178
: 3408