feature: 支持 google authenticator
Closed this issue · 6 comments
RT google authenticator 是一个 google 发行的 2FA 身份验证器，相较于正常ssh链接流程，它在客户端与服务器建立ssh链接时不仅需要输入账号密码，还需要输入验证码才可通过ssh验证流程（先后顺序由sshd_config中的配置决定，如下图）
我对该功能的预期是：在检测到ssh验证过程中需要额外的用户输入时，弹出提示框并要求用户输入。
不知道您对这个提议是否有兴趣
Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑🤝🧑👫🧑🏿🤝🧑🏻👩🏾🤝👨🏿👬🏿
Title: feature: support google authenticator
RT google authenticator is a 2FA authentication device issued by Google. Compared with the normal ssh link process, when the client establishes an ssh link with the server, it not only requires the account password, but also the verification code to pass the ssh verification process (sequentially). The order is determined by the configuration in sshd_config, as shown below)
My expectation for this feature is: when it detects that additional user input is required during the ssh authentication process, pop up a prompt box and ask for user input.
I don't know if you are interested in this proposal
https://cdn.lolli.tech/serverbox/ServerBox-878.apk
我配置了sshd后，但是连ssh cli都没法连接，所以如果有Android，麻烦测试
Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑🤝🧑👫🧑🏿🤝🧑🏻👩🏾🤝👨🏿👬🏿
https://cdn.lolli.tech/serverbox/ServerBox-878.apk
After I configured sshd, I can't even connect to the ssh cli, so if you have Android, please test it.
https://cdn.lolli.tech/serverbox/ServerBox-878.apk
我配置了sshd后，但是连ssh cli都无法连接，所以如果有Android，麻烦测试
我很高兴您听取了大家的建议,增设了跳板服务器, 密匙认证等连接选项. 但本提案所期望的功能其实仅仅是简单的将预先配置登录密码/密匙 改为 进行连接时主动弹出输入框要求用户键入密码, 以达到兼容 google authenticator 的效果 -- 这也是大部分其他 android 终端所采取的方案.
再次感谢您的付出 💐
Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑🤝🧑👫🧑🏿🤝🧑🏻👩🏾🤝👨🏿👬🏿
https://cdn.lolli.tech/serverbox/ServerBox-878.apk
I configured sshd, but even the ssh cli cannot connect, so if you have Android, please test it.
I'm glad that you listened to everyone's suggestions and added connection options such as springboard servers and key authentication. But the function expected in this proposal is actually to simply change the pre-configured login password/key to an active pop-up input when connecting. The box requires the user to enter a password to achieve compatibility with Google Authenticator - this is also the solution adopted by most other Android terminals.
Thank you again for your efforts 💐
ssh 2fa只是UI上看起来与输入ssh密码类似，但其实认证是通过的keyboard-interactive
经过群友测试，已经完成
