keyboard-interactive not working in Jammy Jellyfish (22.04)

Bug #1971174 reported by Thomas F.
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
shellinabox (Ubuntu)
New
Undecided
Unassigned

Bug Description

shellinabox uses an ambigous option line, which disables keyboard-interactive auth for modern OpenSSH versions (at least the one shipped with Jammy). This breaks multi-factor-authentication with pam modules (like google-authenticator). Simple fix is to remove "-oChallengeResponseAuthentication=no" from the ssh command line options, like described in
https://github.com/shellinabox/shellinabox/pull/508.

Rebuilding with the option removed solves the problem.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.