Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Authentication to a proxy server doesn't work with a proxy multi-stage auth. #466

Open
efkolova opened this issue Sep 4, 2024 · 0 comments

Comments

@efkolova
Copy link

efkolova commented Sep 4, 2024

Iam using SSHLibrary and particular Open Connection and Login keywords in robot to open a connection and login to a server.

Open Connection  host=10.45.11.12    port=31022    timeout=5m
Login    username=admin    password=Test1234

Iam getting the following auth failure:

KEYWORD SSHLibrary . Open Connection host=10.45.11.12, port=31022, timeout=5m
Documentation: 	

Opens a new SSH connection to the given host and port.
Start / End / Elapsed: 	20240904 14:31:29.097 / 20240904 14:31:29.097 / 00:00:00.000
14:31:29.097 	TRACE 	Arguments: [ host='10.45.11.12' | port=31022 | timeout='5m' ] 	
14:31:29.097 	TRACE 	Return: 1 	
00:00:00.811 KEYWORD SSHLibrary . Login username=admin, password=Test1234
Documentation: 	

Logs into the SSH server with the given username and password.
Start / End / Elapsed: 	20240904 14:31:29.097 / 20240904 14:31:29.908 / 00:00:00.811
14:31:29.097 	TRACE 	Arguments: [ username='admin' | password='Test1234' ] 	
14:31:29.097 	INFO 	Logging into '10.45.11.12:31022' as 'admin'. 	
14:31:29.466 	DEBUG 	Adding ssh-rsa host key for [10.45.11.12]:31022: b'e966a4d69b72205560fbd44b58e4a531' 	
14:31:29.905 	FAIL 	Authentication failed for user 'admin'. 	
14:31:29.908 	DEBUG 	Traceback (most recent call last):
  File "/home/my-username/env/sats/lib/python3.10/site-packages/SSHLibrary/pythonclient.py", line 183, in _login
    self.client.connect(self.config.host, self.config.port, username,
  File "/home/my-username/env/sats/lib/python3.10/site-packages/paramiko/client.py", line 485, in connect
    self._auth(
  File "/home/my-username/env/sats/lib/python3.10/site-packages/paramiko/client.py", line 818, in _auth
    raise saved_exception
  File "/home/my-username/env/sats/lib/python3.10/site-packages/paramiko/client.py", line 805, in _auth
    self._transport.auth_password(username, password)
  File "/home/my-username/env/sats/lib/python3.10/site-packages/paramiko/transport.py", line 1603, in auth_password
    return self.auth_handler.wait_for_response(my_event)
  File "/home/my-username/env/sats/lib/python3.10/site-packages/paramiko/auth_handler.py", line 263, in wait_for_response
    raise e
paramiko.ssh_exception.AuthenticationException: Authentication failed.

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/home/my-username/env/sats/lib/python3.10/site-packages/SSHLibrary/pythonclient.py", line 197, in _login
    transport.auth_password(username, password)
  File "/home/my-username/env/sats/lib/python3.10/site-packages/paramiko/transport.py", line 1603, in auth_password
    return self.auth_handler.wait_for_response(my_event)
  File "/home/my-username/env/sats/lib/python3.10/site-packages/paramiko/auth_handler.py", line 263, in wait_for_response
    raise e
paramiko.ssh_exception.AuthenticationException: Authentication failed.

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/home/my-username/env/sats/lib/python3.10/site-packages/SSHLibrary/abstractclient.py", line 208, in login
    self._login(username, password, allow_agent, look_for_keys, proxy_cmd, read_config,
  File "/home/my-username/env/sats/lib/python3.10/site-packages/SSHLibrary/pythonclient.py", line 199, in _login
    raise SSHClientException
SSHLibrary.abstractclient.SSHClientException

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/home/my-username/env/sats/lib/python3.10/site-packages/SSHLibrary/library.py", line 1087, in _login
    login_output = login_method(username, *args)
  File "/home/my-username/env/sats/lib/python3.10/site-packages/SSHLibrary/abstractclient.py", line 212, in login
    raise SSHClientException("Authentication failed for user '%s'."
SSHLibrary.abstractclient.SSHClientException: Authentication failed for user 'admin'.

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/home/my-username/env/sats/lib/python3.10/site-packages/SSHLibrary/library.py", line 1007, in login
    return self._login(self.current.login, username, password, is_truthy(allow_agent),
  File "/home/my-username/env/sats/lib/python3.10/site-packages/SSHLibrary/library.py", line 1093, in _login
    raise RuntimeError(e)
RuntimeError: Authentication failed for user 'admin'.

Note, that the username and password are right.

Also, from the server point of view that we want to login, after investigation we have the following details:
The "linux" device specification is not valid for use with proxy. After the Netmiko SSH client provides the user's password to proxy, it expects an SSH message indicating that the auth was successful. This isn't how proxy works. After the password is validated, proxy then enters a keyboard-interactive session where you choose the network element (and possibly credential category, etc.,). Only after you have entered this information and proxy has connected to the network element is the desired SSH auth message sent by proxy to the client, allowing you to open a shell channel and send/receive bytes (in the case of SSH Session) or execute a command (in the case of SSH Command).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant