{"action":"created","issue":{"url":"https://api.github.com/repos/FreeRDP/Remmina/issues/83","labels_url":"https://api.github.com/repos/FreeRDP/Remmina/issues/83/labels{/name}","comments_url":"https://api.github.com/repos/FreeRDP/Remmina/issues/83/comments","events_url":"https://api.github.com/repos/FreeRDP/Remmina/issues/83/events","html_url":"https://github.com/FreeRDP/Remmina/issues/83","id":5586607,"number":83,"title":"Feature Request: SSH Tunnel with no authentication","user":{"login":"Speeddymon","id":1396056,"avatar_url":"https://avatars.githubusercontent.com/u/1396056?v=3","gravatar_id":"","url":"https://api.github.com/users/Speeddymon","html_url":"https://github.com/Speeddymon","followers_url":"https://api.github.com/users/Speeddymon/followers","following_url":"https://api.github.com/users/Speeddymon/following{/other_user}","gists_url":"https://api.github.com/users/Speeddymon/gists{/gist_id}","starred_url":"https://api.github.com/users/Speeddymon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Speeddymon/subscriptions","organizations_url":"https://api.github.com/users/Speeddymon/orgs","repos_url":"https://api.github.com/users/Speeddymon/repos","events_url":"https://api.github.com/users/Speeddymon/events{/privacy}","received_events_url":"https://api.github.com/users/Speeddymon/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2012-07-13T02:01:24Z","updated_at":"2015-10-14T06:19:43Z","closed_at":"2015-10-14T06:19:42Z","body":"Hello,\n\nI've written a detailed description of the feature request in the Remmina Forum on SourceForge: https://sourceforge.net/apps/phpbb/remmina/viewtopic.php?f=2&t=230\n\nTo summarize, my company (a hosting company) uses two factor authentication for logging into our internal servers. This is setup both in Windows and Linux. They also have customer machines on a separate physical network, with so-called \"jump host\" machines that are connected to both networks to facilitate connections between the two on the back end, so that we can firewall off SSH and RDP from the public internet.\n\nIn order to connect to linux machines, this is easy; I can setup an SSH tunnel (~/.ssh/config ProxyCommand) to the jump host machine, which then uses ssh -W to forward the connection over to the remote machine. Using this setup, I also have connection sharing and persistence (~/.ssh/config ControlMaster and ControlPersist) so that when I connect to the jump host machine, I only need to enter my internal credentials once, and then any connections I forward through that jump host utilize the already existing connection to the jump host, which means that authentication is bypassed:\n\n[speeddy@ProductionVM ~]$ ssh -vvv jumphostmachine\nOpenSSH_5.9p1, OpenSSL 1.0.0j-fips 10 May 2012\ndebug1: Reading configuration data /root/.ssh/config\ndebug1: /root/.ssh/config line 12: Applying options for jumphostmachine\ndebug1: /root/.ssh/config line 30: Applying options for *\ndebug1: Reading configuration data /etc/ssh/ssh_config\ndebug1: /etc/ssh/ssh_config line 50: Applying options for *\ndebug1: auto-mux: Trying existing master\ndebug2: fd 3 setting O_NONBLOCK\ndebug2: mux_client_hello_exchange: master version 4\ndebug3: mux_client_request_forwards: requesting forwardings: 0 local, 0 remote\ndebug3: mux_client_request_session: entering\ndebug3: mux_client_request_alive: entering\ndebug3: mux_client_request_alive: done pid = 1788\ndebug3: mux_client_request_session: session request sent\ndebug1: mux_client_request_session: master session id: 2\nLast login: Thu Jul 12 18:31:12 2012 from ip.ip.ip.ip\nAuthorized Users Only.  Activity may be monitored.\n\n\nUnfortunately, for Windows, using Remmina, this does not work, because Remmina tries to authenticate (using password authentication), rather than using the already existing connection and bypassing the authentication.\n\nI'd like to see a new ability for Remmina to use the unix socket created by the ssh ControlMaster option, so that authentication is bypassed, and a \"None\" radio button in the Authentication section on the SSH tab for connections. That way, Remmina would bypass SSH authentication when the connection it makes is a shared connection. It would still use Windows Authentication in the Basic tab, and so would still supply the Windows username and password."},"comment":{"url":"https://api.github.com/repos/FreeRDP/Remmina/issues/comments/147949127","html_url":"https://github.com/FreeRDP/Remmina/issues/83#issuecomment-147949127","issue_url":"https://api.github.com/repos/FreeRDP/Remmina/issues/83","id":147949127,"user":{"login":"antenore","id":5975,"avatar_url":"https://avatars.githubusercontent.com/u/5975?v=3","gravatar_id":"","url":"https://api.github.com/users/antenore","html_url":"https://github.com/antenore","followers_url":"https://api.github.com/users/antenore/followers","following_url":"https://api.github.com/users/antenore/following{/other_user}","gists_url":"https://api.github.com/users/antenore/gists{/gist_id}","starred_url":"https://api.github.com/users/antenore/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/antenore/subscriptions","organizations_url":"https://api.github.com/users/antenore/orgs","repos_url":"https://api.github.com/users/antenore/repos","events_url":"https://api.github.com/users/antenore/events{/privacy}","received_events_url":"https://api.github.com/users/antenore/received_events","type":"User","site_admin":false},"created_at":"2015-10-14T06:19:42Z","updated_at":"2015-10-14T06:19:42Z","body":"Closed by #235"}}