SSH connection via Beyond Trust password Safe (ssh -p PortNo passwordsafeusernme+UserNameForSshBox+HostnameOfSshBox@HostanmfPasswordSafeServer)
Excuse the complex title but I'm looking at setting up SSH sessions that l authenticate through password safe.
I've been given a command line string that will work for this but can't configure an SSH session to work for it.
The connection string to be pasted into powershell or a terminal would be (using false values) "ssh -p 4096 joe.bloggs+jbloggs+server2@server1"
To fully clarify, joe.bloggs is the windows domain user configured in password safe, jbloggs is the Linux user linked to that Windows account, server2 is the server to connect to and server1 is the password safe server that it goes via.
I'd verch apopreciate if anyone could help me in setting up these type of sessions. I understand there is a Beyond Trust Password Safe opton in sessions but it's deprecated and I'd rather use this method if possible as I feel it would be more robust and future proof.
Hello,
I had a discussion with our engineering department and would it be possible to create a SSH Shell entry that will contain the information's below:
Host = server1
User = joe.bloggs+jbloggs+server2
(Port = 4096)
Let us know if that works or not.
Best regards,
Jeff Dagenais
I've just tried that and it just repeatedly asks for my password.
Hello,
Is it possible to enable the verbose inside your SSH Shell session like explain in this article and send us the logs please?
https://kb.devolutions.net/rdm_send_ssh_logs.html
Best regards,
Jeff Dagenais
Hello,
The engineering department made me think about something.
Inside the SSH Shell session properties, go in the Advanced tab and select True for the Interactive authentication in terminal option.
Let us know if that work.
Best regards,
Jeff Dagenais
Hi, I've logged the attempt as requested. I also added an attempt with the password safe server configured as a jump server as I'd noticed in my initial attempts that did trigger the dual factor auth but as soon as I approve on my phone it just asks for password again and effectively behaves like attempt 1.
Devolution_attempt_2_06082020_with_jump_server.log
Devolution_attempt_1_06082020.log
Hi Jeff,
Just to let you know, switching on SSH Shell session properties, go in the Advanced tab and select True for the Interactive authentication in terminal option worked beautifully.
Thanks,
Neil.