Bug #16781

webshell PAM should send "password:" or "token:" prompt

Added by Peter Amstutz about 1 year ago. Updated about 1 year ago.

Status:
Closed
Priority:
Low
Assigned To:
-
Category:
-
Target version:
Start date:
Due date:
% Done:

0%

Estimated time:
Story points:
-

Description

This should send a prompt so that webshell javascript can wait for it and send the token at the right time.


Related issues

Related to Arvados - Bug #16773: webshell sends token too earlyClosed

History

#1 Updated by Peter Amstutz about 1 year ago

  • Description updated (diff)

#2 Updated by Peter Amstutz about 1 year ago

  • Description updated (diff)

#3 Updated by Peter Amstutz about 1 year ago

  • Related to Bug #16773: webshell sends token too early added

#4 Updated by Peter Amstutz about 1 year ago

  • Assigned To set to Peter Amstutz

#5 Updated by Peter Amstutz about 1 year ago

  • Priority changed from Normal to Low
  • Assigned To deleted (Peter Amstutz)
  • Status changed from New to Closed
  • Category deleted (Login)

The golang PAM does this already

#6 Updated by Tom Clegg about 1 year ago

Our config examples for the Python-based PAM module (in the package and on the install doc page) used to have the "noprompt" option. Without that, it would prompt "Arvados API token: ".

Instead of pam_conv() the new Go-based PAM module uses pam_get_authtok(...,NULL) which "uses pre-defined prompts". https://man7.org/linux/man-pages/man3/pam_get_authtok.3.html

#7 Updated by Peter Amstutz about 1 year ago

Tom Clegg wrote:

Our config examples for the Python-based PAM module (in the package and on the install doc page) used to have the "noprompt" option. Without that, it would prompt "Arvados API token: ".

Instead of pam_conv() the new Go-based PAM module uses pam_get_authtok(...,NULL) which "uses pre-defined prompts". https://man7.org/linux/man-pages/man3/pam_get_authtok.3.html

I updated the workbench webshell javascript integration to wait for "assword:" as the trigger to send the authentication token. Do we need to document that?

Also available in: Atom PDF