Remote Desktop manager + ed25519 = asking for passphrase, even there's none

Remote Desktop manager + ed25519 = asking for passphrase, even there's none

avatar

Hello,

I'm using Remote Desktop Manager 2020.2.18.0 which should support SSH keys with ed25519 algorithm.

When I import an private key with ed25519 algorithm - generated by Puttygen - in my Private Vault, I get a question for a passphrase (which is never accepted). Connecting with the same key from within Putty just works fine.

Even if I generate a new key pair in ed25519 directly from within RDM without any passphrase, I still get the passphrase question upon connection to a SSH host. Even when I uncheck "always promt for passphrase" in de private vault credential entry.

I used RSA keys with 4096 bit key length in the past (generated in Puttygen and imported in RDM private vault) which always works just fine.

Am I missing something here?

thanks!

All Comments (9)

avatar

Hello,

Do you have a Passphrase in your Private Key? If you have one, did you enter the Passphrase in your Private Key entry in RDM after unchecking "Always prompt for passphrase"?

Best Regards,

Etienne Lord

avatar

Yes, I do have a passphrase in use. When I uncheck the "Always prompt for passphrase" and fill in the passphrase, I get "Invalid passphrase"error. Same private key using Putty just works fine with that same passphrase.

avatar

Hello,

Would you be able to send your logs and verbose after recreating the issue : https://kb.devolutions.net/rdm_send_ssh_logs.html
Note that Logs are now in a separate tab, verbose remains in the "Advanced" tab

Best Regards,

Etienne Lord

avatar

Hello, I do not have the options as described in your link:

Advanced tab
Snap 2020-08-14 at 15.53.59

logs tab
Snap 2020-08-14 at 15.55.15

In left colum general, no tab logs to see and no verbose option under advanced ..

Snap 2020-08-14 at 15.58.28.png

Snap 2020-08-14 at 15.55.15.png

Snap 2020-08-14 at 15.53.59.png

avatar

Hello Tom,

this is caused by the fact that you are using the Putty - SSH Shell (Rebex) session type.

The setting which Etienne mentioned is only in the (native) SSH Shell session available.


Regards,
Min

ssh.png

avatar

Is there a way to convert all or current session entries from Putty - SSH shell (Rebex) to the native SSH shell including the user specific settings (especially overriding credentials with ones from the private vault)?

avatar

Hello,

indeed - this can be fullified with the Batch Edit feature.
You'll find a similar sample here (in your case Convert Putty/Rebex Sesstion to SSH)

Please try this first on 1 entry - and create always a backup before you execute a batch edit.

Regards,
Min

avatar

Thank you, I've converted already a couple of sessions.

My private SSH key is protected with a passphrase. I therfore have an entry in my private vault. When I used the Putty/Rebex Sessions, the passphrase prompt happend only upon the first connection and is not thrown as long as Remote Deskop Manager is opened. So upon consecutive sessions, I didn't re-enter the the passphrase for every session.

Upon the first connection after starting RDM, the password prompt looks like this:
forum image

Unfortunately, this behavior has changed by switching to the built in SSH sessions. I'm now prompted for the passphrase upon every connection using that same private key from my private vault.

What's more bizarre: this time it's in my local language (Dutch), even if my operating system and Remote Destkop manager is English. Still, the message means the same.
forum image

I would like to keep the behavior of only one passphrase prompt for every private key as long as Remote Desktop Manager is active. How can I achieve this?

avatar

Hello,

This behavior is intended, as checking "always prompt for passphrase" should prompt it on every usage, on the same basis as the "always ask for password" checkboxes we have in certain entries. In this case the problem is that the passphrase prompt window is misleading, it shouldn't say that it will be remembered. The Rebex entries still function this way because they are deprecated entries that will eventually be removed.

If you would like to only receive a passphrase prompt once, the only way I can think of is to store your private keys in Private Key entries without a passphrase, and mark them to load in the key agent automatically. Then, use the key agent in RDM, as RDM will load the keys in the agent only once until you close the agent/close RDM. Your SSH entries will need to be configured to use the key agent if you choose to work this way.

Regards,

Hubert Mireault