You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by N1ghtm4r3x <13...@hotmail.nl> on 2019/07/15 18:48:05 UTC

SSK key import failed

Hello,

I tried multiple things but i cant get password protected ssh keys working,
without password everything works but as soon as i add a password it fails.

Docker Logs:

Exception in thread "Thread-120" java.lang.IllegalStateException: Message
will not be sent because the WebSocket session has been closed,
	at
org.apache.tomcat.websocket.WsRemoteEndpointImplBase.writeMessagePart(WsRemoteEndpointImplBase.java:425),
	at
org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:309),
	at
org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:250),
	at
org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendString(WsRemoteEndpointImplBase.java:191),
	at
org.apache.tomcat.websocket.WsRemoteEndpointBasic.sendText(WsRemoteEndpointBasic.java:37),
	at
org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.sendInstruction(GuacamoleWebSocketTunnelEndpoint.java:152),
	at
org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.access$200(GuacamoleWebSocketTunnelEndpoint.java:53),
	at
org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint$2.run(GuacamoleWebSocketTunnelEndpoint.java:253),
guacd[424]: INFO:	Connection "$b6b4eabe-279b-47f0-88a3-cb57046b8f4a"
removed.,
guacd[424]: INFO:	Creating new client for protocol "ssh",
guacd[424]: INFO:	Connection ID is "$005682b6-ce16-4df6-8efc-57cf104f4cec",
guacd[1135]: INFO:	User "@914d0afe-a443-4204-b979-77a57c183aea" joined
connection "$005682b6-ce16-4df6-8efc-57cf104f4cec" (1 users now present),
18:39:58.313 [http-nio-8080-exec-4] INFO  o.a.g.tunnel.TunnelRequestService
- User "adminjbo" connected to connection "1".,
guacd[1135]: ERROR:	Auth key import failed: bad decrypt,
guacd[1135]: INFO:	User "@914d0afe-a443-4204-b979-77a57c183aea" disconnected
(0 users remain),
guacd[1135]: INFO:	Last user of connection
"$005682b6-ce16-4df6-8efc-57cf104f4cec" disconnected,
18:39:58.377 [http-nio-8080-exec-5] INFO  o.a.g.tunnel.TunnelRequestService
- User "adminjbo" disconnected from connection "1". Duration: 64
milliseconds,
Exception in thread "Thread-122" java.lang.IllegalStateException: Message
will not be sent because the WebSocket session has been closed,
	at
org.apache.tomcat.websocket.WsRemoteEndpointImplBase.writeMessagePart(WsRemoteEndpointImplBase.java:425),
	at
org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:309),
	at
org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:250),
	at
org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendString(WsRemoteEndpointImplBase.java:191),
	at
org.apache.tomcat.websocket.WsRemoteEndpointBasic.sendText(WsRemoteEndpointBasic.java:37),
	at
org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.sendInstruction(GuacamoleWebSocketTunnelEndpoint.java:152),
	at
org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.access$200(GuacamoleWebSocketTunnelEndpoint.java:53),
	at
org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint$2.run(GuacamoleWebSocketTunnelEndpoint.java:253),
guacd[424]: INFO:	Connection "$005682b6-ce16-4df6-8efc-57cf104f4cec"
removed.,
guacd[424]: INFO:	Creating new client for protocol "ssh",
guacd[424]: INFO:	Connection ID is "$4ff260a5-4e00-4258-b04a-fa33d9b1b1ce",
guacd[1147]: INFO:	User "@70f342ba-b8ba-4c7b-a07f-21baaf7d6b6e" joined
connection "$4ff260a5-4e00-4258-b04a-fa33d9b1b1ce" (1 users now present),
18:40:14.309 [http-nio-8080-exec-8] INFO  o.a.g.tunnel.TunnelRequestService
- User "adminjbo" connected to connection "1".,
guacd[1147]: ERROR:	Auth key import failed: bad decrypt,
guacd[1147]: INFO:	User "@70f342ba-b8ba-4c7b-a07f-21baaf7d6b6e" disconnected
(0 users remain),
guacd[1147]: INFO:	Last user of connection
"$4ff260a5-4e00-4258-b04a-fa33d9b1b1ce" disconnected,
18:40:14.367 [http-nio-8080-exec-3] INFO  o.a.g.tunnel.TunnelRequestService
- User "adminjbo" disconnected from connection "1". Duration: 58
milliseconds,
Exception in thread "Thread-124" java.lang.IllegalStateException: Message
will not be sent because the WebSocket session has been closed,
	at
org.apache.tomcat.websocket.WsRemoteEndpointImplBase.writeMessagePart(WsRemoteEndpointImplBase.java:425),
	at
org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:309),
	at
org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:250),
	at
org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendString(WsRemoteEndpointImplBase.java:191),
	at
org.apache.tomcat.websocket.WsRemoteEndpointBasic.sendText(WsRemoteEndpointBasic.java:37),
	at
org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.sendInstruction(GuacamoleWebSocketTunnelEndpoint.java:152),
	at
org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.access$200(GuacamoleWebSocketTunnelEndpoint.java:53),
	at
org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint$2.run(GuacamoleWebSocketTunnelEndpoint.java:253),
guacd[424]: INFO:	Connection "$4ff260a5-4e00-4258-b04a-fa33d9b1b1ce"
removed.,
guacd[424]: INFO:	Creating new client for protocol "ssh",
guacd[424]: INFO:	Connection ID is "$50c82811-532a-4ea2-8158-de5f78eea482",
guacd[1159]: INFO:	User "@b974226b-5769-4397-aa66-12a4af10e0cc" joined
connection "$50c82811-532a-4ea2-8158-de5f78eea482" (1 users now present),
18:40:30.317 [http-nio-8080-exec-1] INFO  o.a.g.tunnel.TunnelRequestService
- User "adminjbo" connected to connection "1".,
guacd[1159]: ERROR:	Auth key import failed: bad decrypt,
guacd[1159]: INFO:	User "@b974226b-5769-4397-aa66-12a4af10e0cc" disconnected
(0 users remain),
guacd[1159]: INFO:	Last user of connection
"$50c82811-532a-4ea2-8158-de5f78eea482" disconnected,
18:40:30.381 [http-nio-8080-exec-9] INFO  o.a.g.tunnel.TunnelRequestService
- User "adminjbo" disconnected from connection "1". Duration: 64
milliseconds,
Exception in thread "Thread-126" java.lang.IllegalStateException: Message
will not be sent because the WebSocket session has been closed,
	at
org.apache.tomcat.websocket.WsRemoteEndpointImplBase.writeMessagePart(WsRemoteEndpointImplBase.java:425),
	at
org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:309),
	at
org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:250),
	at
org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendString(WsRemoteEndpointImplBase.java:191),
	at
org.apache.tomcat.websocket.WsRemoteEndpointBasic.sendText(WsRemoteEndpointBasic.java:37),
	at
org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.sendInstruction(GuacamoleWebSocketTunnelEndpoint.java:152),
	at
org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.access$200(GuacamoleWebSocketTunnelEndpoint.java:53),
	at
org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint$2.run(GuacamoleWebSocketTunnelEndpoint.java:253),
guacd[424]: INFO:	Connection "$50c82811-532a-4ea2-8158-de5f78eea482"
removed.,
guacd[424]: INFO:	Creating new client for protocol "ssh",
guacd[424]: INFO:	Connection ID is "$90552ed6-9f24-4296-afbe-afb24c3ba4b6",
guacd[1171]: INFO:	User "@d48b226c-d1c3-4aa7-9a53-850c92dd6bd6" joined
connection "$90552ed6-9f24-4296-afbe-afb24c3ba4b6" (1 users now present),
18:41:00.909 [http-nio-8080-exec-4] INFO  o.a.g.tunnel.TunnelRequestService
- User "adminjbo" connected to connection "1".,
guacd[1171]: ERROR:	Auth key import failed: (null),
guacd[1171]: INFO:	User "@d48b226c-d1c3-4aa7-9a53-850c92dd6bd6" disconnected
(0 users remain),
guacd[1171]: INFO:	Last user of connection
"$90552ed6-9f24-4296-afbe-afb24c3ba4b6" disconnected,
18:41:00.978 [http-nio-8080-exec-8] INFO  o.a.g.tunnel.TunnelRequestService
- User "adminjbo" disconnected from connection "1". Duration: 69
milliseconds,
Exception in thread "Thread-128" java.lang.IllegalStateException: Message
will not be sent because the WebSocket session has been closed,
	at
org.apache.tomcat.websocket.WsRemoteEndpointImplBase.writeMessagePart(WsRemoteEndpointImplBase.java:425),
	at
org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:309),
	at
org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:250),
	at
org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendString(WsRemoteEndpointImplBase.java:191),
	at
org.apache.tomcat.websocket.WsRemoteEndpointBasic.sendText(WsRemoteEndpointBasic.java:37),
	at
org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.sendInstruction(GuacamoleWebSocketTunnelEndpoint.java:152),
	at
org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.access$200(GuacamoleWebSocketTunnelEndpoint.java:53),
	at
org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint$2.run(GuacamoleWebSocketTunnelEndpoint.java:253),
guacd[424]: INFO:	Connection "$90552ed6-9f24-4296-afbe-afb24c3ba4b6"
removed.,
guacd[424]: INFO:	Creating new client for protocol "ssh",
guacd[424]: INFO:	Connection ID is "$164651c5-6c95-4209-83e3-04b748e67a56",
guacd[1186]: INFO:	User "@35449405-8eb9-4e61-8cdf-e12aadd2d10c" joined
connection "$164651c5-6c95-4209-83e3-04b748e67a56" (1 users now present),
18:43:04.805 [http-nio-8080-exec-9] INFO  o.a.g.tunnel.TunnelRequestService
- User "adminjbo" connected to connection "1".,
guacd[1186]: ERROR:	Auth key import failed: (null),
guacd[1186]: INFO:	User "@35449405-8eb9-4e61-8cdf-e12aadd2d10c" disconnected
(0 users remain),
guacd[1186]: INFO:	Last user of connection
"$164651c5-6c95-4209-83e3-04b748e67a56" disconnected,
Exception in thread "Thread-130" java.lang.IllegalStateException: Message
will not be sent because the WebSocket session has been closed,
	at
org.apache.tomcat.websocket.WsRemoteEndpointImplBase.writeMessagePart(WsRemoteEndpointImplBase.java:425),
18:43:04.870 [http-nio-8080-exec-5] INFO  o.a.g.tunnel.TunnelRequestService
- User "adminjbo" disconnected from connection "1". Duration: 65
milliseconds,
	at
org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:309),
	at
org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:250),
	at
org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendString(WsRemoteEndpointImplBase.java:191),
	at
org.apache.tomcat.websocket.WsRemoteEndpointBasic.sendText(WsRemoteEndpointBasic.java:37),
	at
org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.sendInstruction(GuacamoleWebSocketTunnelEndpoint.java:152),
	at
org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.access$200(GuacamoleWebSocketTunnelEndpoint.java:53),
	at
org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint$2.run(GuacamoleWebSocketTunnelEndpoint.java:253),
guacd[424]: INFO:	Connection "$164651c5-6c95-4209-83e3-04b748e67a56"
removed.,

i also had some problems with guacd but that is already fixed,
i tried keys from ssh-keygen (RSA 1024, 2048, 4096), also tried with
puttygen while forcing openssh output.



--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org


Re: SSK key import failed

Posted by Nick Couchman <vn...@apache.org>.
On Mon, Jul 15, 2019 at 2:48 PM N1ghtm4r3x <13...@hotmail.nl> wrote:

> Hello,
>
> I tried multiple things but i cant get password protected ssh keys working,
> without password everything works but as soon as i add a password it fails.
>
> guacd[424]: INFO:       Connection "$b6b4eabe-279b-47f0-88a3-cb57046b8f4a"
> removed.,
> guacd[424]: INFO:       Creating new client for protocol "ssh",
> guacd[424]: INFO:       Connection ID is
> "$005682b6-ce16-4df6-8efc-57cf104f4cec",
> guacd[1135]: INFO:      User "@914d0afe-a443-4204-b979-77a57c183aea" joined
> connection "$005682b6-ce16-4df6-8efc-57cf104f4cec" (1 users now present),
> 18:39:58.313 [http-nio-8080-exec-4] INFO  o.a.g.tunnel.TunnelRequestService
> - User "adminjbo" connected to connection "1".,
> guacd[1135]: ERROR:     Auth key import failed: bad decrypt,
>

This is your issue right here.  This is related to guacd, but not guacd
itself - libssh2 is actually what's importing and decrypting the keys.  My
guess is that one of a couple of things is going on:
- You're using an unsupported key/encryption format.  You indicated you
tried multiple key formats and options, but this is still a possibility.  I
would stick with RSA 2048 for the purposes of testing, and just work with
that until you get it working.
- You're pasting it in a format that is truncating part of the key, and
you're ending up with a bad key inside the line.  Make sure you're pasting
it into the box correctly - you should paste the entire key in OpenSSH PEM
format.
- You're using an incorrect key passphrase, you're not entering the
decryption passphrase at all, or you're entering it in the wrong place
(like the password parameter instead of the passphrase parameter).  Please
note that Guacamole does not currently prompt you for the passphrase for
the key, so if you paste an encrypted SSH key into the box to use for
authentication, you have to also provide the passphrase for decrypting it
(in the Passphrase parameter).

Please verify you have the above correct and try, again.  Also, I would
suggest a systematic approach - change one thing at a time until you get it
working.

-Nick