You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by CYBER PUNK <br...@gmail.com> on 2022/06/22 11:50:14 UTC

question on disabling ssh-key passphrases

Hello

Thanks for the previous help regarding 2FA the environment variable works.
But I do have a question regarding ssh keys.
I'm adding my ssh keys in the private key section for key authentication
i keep being prompted for a passphrase when my keys have none

Is there a way to disable sshkey passphrases
i've checked my key for a passphrase with ssh-keygen -y
and i'm still not prompted for one so i am under the assumption I have none.
I also do not recall setting one in the first place. As ive never been
prompted for one
when logging in.

Only with guacamole do I get prompted for a passphrase.

Thank you
Regards
Brodie

Re: question on disabling ssh-key passphrases

Posted by CYBER PUNK <br...@gmail.com>.
Hello

With regard to the logs of guacd i nothiced when running docker logs the
following line
guacd[1421]: ERROR:     Auth key import failed: (null)

Not sre if this helps but please let me know if you require more detail.

Regards
Brodie

On Thu, Jun 23, 2022 at 6:01 PM CYBER PUNK <br...@gmail.com>
wrote:

> will tryto get the logs then post them
>
>
> On Wed, Jun 22, 2022 at 5:11 PM Nick Couchman <vn...@apache.org> wrote:
>
>> On Wed, Jun 22, 2022 at 7:51 AM CYBER PUNK <br...@gmail.com>
>> wrote:
>>
>>> Hello
>>>
>>> Thanks for the previous help regarding 2FA the environment variable
>>> works.
>>> But I do have a question regarding ssh keys.
>>> I'm adding my ssh keys in the private key section for key authentication
>>> i keep being prompted for a passphrase when my keys have none
>>>
>>> Is there a way to disable sshkey passphrases
>>> i've checked my key for a passphrase with ssh-keygen -y
>>> and i'm still not prompted for one so i am under the assumption I have
>>> none.
>>> I also do not recall setting one in the first place. As ive never been
>>> prompted for one
>>> when logging in.
>>>
>>> Only with guacamole do I get prompted for a passphrase.
>>>
>>>
>> Can you put guacd in debug mode and see what messages you're getting? I
>> suspect that the actual issue is that the private key format you are using
>> is either incorrect or not supported by the version of libssh2 you have
>> installed, but that guacd's behavior when it cannot load the key is to
>> prompt for a passphrase and re-try with that to see if the key is
>> encrypted. guacd debug logs should tell you a bit more.
>>
>> -Nick
>>
>

Re: question on disabling ssh-key passphrases

Posted by CYBER PUNK <br...@gmail.com>.
will tryto get the logs then post them


On Wed, Jun 22, 2022 at 5:11 PM Nick Couchman <vn...@apache.org> wrote:

> On Wed, Jun 22, 2022 at 7:51 AM CYBER PUNK <br...@gmail.com>
> wrote:
>
>> Hello
>>
>> Thanks for the previous help regarding 2FA the environment variable works.
>> But I do have a question regarding ssh keys.
>> I'm adding my ssh keys in the private key section for key authentication
>> i keep being prompted for a passphrase when my keys have none
>>
>> Is there a way to disable sshkey passphrases
>> i've checked my key for a passphrase with ssh-keygen -y
>> and i'm still not prompted for one so i am under the assumption I have
>> none.
>> I also do not recall setting one in the first place. As ive never been
>> prompted for one
>> when logging in.
>>
>> Only with guacamole do I get prompted for a passphrase.
>>
>>
> Can you put guacd in debug mode and see what messages you're getting? I
> suspect that the actual issue is that the private key format you are using
> is either incorrect or not supported by the version of libssh2 you have
> installed, but that guacd's behavior when it cannot load the key is to
> prompt for a passphrase and re-try with that to see if the key is
> encrypted. guacd debug logs should tell you a bit more.
>
> -Nick
>

Re: question on disabling ssh-key passphrases

Posted by Nick Couchman <vn...@apache.org>.
On Wed, Jun 22, 2022 at 7:51 AM CYBER PUNK <br...@gmail.com>
wrote:

> Hello
>
> Thanks for the previous help regarding 2FA the environment variable works.
> But I do have a question regarding ssh keys.
> I'm adding my ssh keys in the private key section for key authentication
> i keep being prompted for a passphrase when my keys have none
>
> Is there a way to disable sshkey passphrases
> i've checked my key for a passphrase with ssh-keygen -y
> and i'm still not prompted for one so i am under the assumption I have
> none.
> I also do not recall setting one in the first place. As ive never been
> prompted for one
> when logging in.
>
> Only with guacamole do I get prompted for a passphrase.
>
>
Can you put guacd in debug mode and see what messages you're getting? I
suspect that the actual issue is that the private key format you are using
is either incorrect or not supported by the version of libssh2 you have
installed, but that guacd's behavior when it cannot load the key is to
prompt for a passphrase and re-try with that to see if the key is
encrypted. guacd debug logs should tell you a bit more.

-Nick