openSSH authentication through pGina
alitimer opened this issue · comments
I have some problems when trying to connect to Windows machine via 'ssh' which has pGina for authentication and is running 'ssh server'. ssh says at authentication time:
Permission denied, please try again.
went through ssh log, in where was mentioned:
Failed password for USER from IP port PORT ssh2
and found out that it doesn't happen when I try to connect via ssh by a local standard/admin account.
Comment 1: our custom pGina rule puts server authentication on top of the local authentication.
That would be awesome if there is any way to config authentication/authorization through server based system (LDAP) sitting on top of Windows authentication for ssh authentication. It enables us to connect by online accounts as well as local account.
Comment 2: I can connect via ssh by an online account authenticated through LDAP<->pGina but till when the next user has not logged in. Once next one logged in, I cannot connect anymore and get the same above 'Permission denied.' message.
openSSh just calls LogonUser* Windows APIs to perform authentication. It doesn't have any configuration/flexibility to use into any other forms of authentication/API calls.