SSH支持密码+密钥多认证方式连接

[kongbai]

开启双重认证（密钥文件+密码认证）

AuthenticationMethods password,publickey

服务器的ssh配置如上

[xiaoqinvar]

https://host.terminal.icu/topic/211/像xshell一样的用户身份验证?_=1756375233339

我有提过，作者没回复

[kongbai]

最近天天更新，希望能支持这种多认证方式呀，就是因为这个我有几台服务器还是只能用Xshell，不能完全切换到XTerminal

[vector]

xterminal对于finalshell和xshell的keyboard interactive也不支持

[稳弟]

专项加强一下

[尚都老大]

此回复已被删除！

[vector]

@稳弟 今天尝试开了二验的服务器，无论是账号密码方式，还是keyboard interactive，都无法登录

Outbound: Sending USERAUTH_REQUEST (keyboard-interactive) Inbound: Received USERAUTH_INFO_REQUEST Outbound: Sending USERAUTH_INFO_RESPONSE Inbound: Received USERAUTH_INFO_REQUEST Outbound: Sending USERAUTH_INFO_RESPONSE Inbound: Received USERAUTH_FAILURE (publickey,gssapi-keyex,gssapi-with-mic,password,keyboard-interactive) Client: keyboard-interactive auth failed Outbound: Sending USERAUTH_REQUEST (password) Inbound: Received USERAUTH_FAILURE (publickey,gssapi-keyex,gssapi-with-mic,password,keyboard-interactive) Client: password auth failed Authentication method not allowed: publickey Authentication method not allowed: gssapi-keyex Authentication method not allowed: gssapi-with-mic All configured authentication methods failed

[稳弟]

PasswordAuthentication yes
PubkeyAuthentication yes
ChallengeResponseAuthentication yes
UsePAM yes

认证方式需要开一下吧，否则都是 method not allowed

[稳弟]

@vector 在 SSH支持密码+密钥多认证方式连接 中说：

@稳弟 今天尝试开了二验的服务器，无论是账号密码方式，还是keyboard interactive，都无法登录

Outbound: Sending USERAUTH_REQUEST (keyboard-interactive) Inbound: Received USERAUTH_INFO_REQUEST Outbound: Sending USERAUTH_INFO_RESPONSE Inbound: Received USERAUTH_INFO_REQUEST Outbound: Sending USERAUTH_INFO_RESPONSE Inbound: Received USERAUTH_FAILURE (publickey,gssapi-keyex,gssapi-with-mic,password,keyboard-interactive) Client: keyboard-interactive auth failed Outbound: Sending USERAUTH_REQUEST (password) Inbound: Received USERAUTH_FAILURE (publickey,gssapi-keyex,gssapi-with-mic,password,keyboard-interactive) Client: password auth failed Authentication method not allowed: publickey Authentication method not allowed: gssapi-keyex Authentication method not allowed: gssapi-with-mic All configured authentication methods failed

1

[vector]

@稳弟 我去排查一下

[vector]

@稳弟 整个过程是这样的，上次支持keyboard之后尝试连接开了二验的服务器，然后能够正常连接。由于easyconnect会在本地电脑安装软件，并且会代理本地的所有流量，影响其他vpn软件的使用，为了解决这个问题就在网上查找了docker-easyconnect的教程，docker-compose.yaml内容如下：

services:
  easyconnect:
    image: hagb/docker-easyconnect:7.6.7
    container_name: easyconnect
    restart: unless-stopped
    devices:
      - /dev/net/tun:/dev/net/tun
    cap_add:
      - NET_ADMIN
    environment:
      PASSWORD: "114514"
      URLWIN: "1"
      DISABLE_PKG_VERSION_XML: "1"
      CLIP_TEXT: "https://vpn.xxxx"
    volumes:
      - ${HOME}/.ecdata:/root
    ports:
      - "127.0.0.1:5901:5901"
      - "127.0.0.1:1080:1080"
      - "127.0.0.1:1888:8888"

开启容器后，通过vnc://127.0.0.1:5901，输入密码便可以进入到登录账号密码的easyconnect界面，随后在xterminal里面的代理选项填写socks://127.0.0.1:1080。

当天这样尝试后，xterminal能够整成连接服务器。今天再次尝试docker-easyconnnect就出现了错误。当然我也尝试了finalshell，也是成功不了。

换回本地电脑安装easyconnect登录账号的方式，xterminal删除socks代理，xterminal是能够正常连接服务器的。

问题可能出在了docker-easyconnnect，但是奇怪的是xterminal之前确实成功利用socks连接到了服务器。

[稳弟]

好复杂的方式，我个人自己的服务器都是组网连接的，你要不试试

[Rex]

easyconnect 是会比较麻烦，后面我们这边直接换成了 vTrust