Re: tramp (2.6.0-pre master/b30b33ed9b3cdacecebef73ad1131f03c635de7a); tramp over MFA/totp

[Michael Albinus]

Randy Yates <RandyY@as2inc.com> writes:

Hi Randy,

>     My organization has recently enabled MFA/totp over ssh on all our linux
>     systems. We are using JumpCloud and it was apparently configured by
>     JumpCloud automatically when they turned MFA on.
>
>     I am able to ssh from one linux box (ubuntu 18.04) to another using the
>     command-line ssh (openssh). The transaction looks like this:
>
>         <username>@Lubuntu-22259:/<cwd>$ ssh -YC <username>@<dest-host>
>         Password:
>         Verification code: xxxxxxxxxxxx

[...]

>     I found that when I use tramp, it prompts me for the password as usual,
>     but after entering the correct password, it prompts me again for the
>     password instead of the verification code.

[...]

>     Finally, note that before these security updates, tramp was working
>     fine. I am using emacs version
>
>         GNU Emacs 29.0.50 (build 2, x86_64-pc-linux-gnu, GTK+ Version 
> 3.22.30, cairo version 1.15.10) of 2022-06-16.
>
>     Is it possible to update tramp so that it operates correctly with this
>     configuration?

Well, my first reaction was to ask you to add the "verification code"
prompt to password-word-equivalents. This is what Tramp uses for
password prompts.

However, one-time passwords are different. So I've assembled the
appended patch, could you pls test? It is on top of the emacs-29 branch
in git, I hope it applies to your more-than-a-year-old Emacs 29
version. If not, you could install the recent Tramp 2.6.1.2 from GNU
ELPA, and apply the patch on this. Note that there is a problem in
installing Tramp from GNU ELPA with Emacs 29.1, see
<https://elpa.gnu.org/packages/tramp.html>.

>     Thanks for your help, and let me know if there is anything else you
>     need.
>
>     Randy Yates

Best regards, Michael.

txtOO16xCz6Ki.txt
Description: Text Data