<html><head></head><body><div style="font-family: Verdana;font-size: 12.0px;"><div>
<div>Hi Mihai</div>
<div> </div>
<div>I have found the problem. The prompt of the SSH server is coded in the source code of x2goclient.</div>
<div>We use for authentication via SecurID a different SSH promtp to emphasize the difference. Last week I already changed the prompt of the SecurID prompt to be the same as the normal SSH, but I didn't notice the blank after the "Password: "...</div>
<div>Unfortunately, I haven't managed to get the blank space at the end of "Password: ". So I just edited the source code of the x2goclient, and changed the line where the expected prompt is defined.</div>
<div>This solution worked.</div>
<div>Would it make sense to include the expected ssh prompt as a parameter in x2go in order to avoid having to recomplie the source code in a such case?</div>
<div> </div>
<div>Regards</div>
<div>Swizzly</div>
<div> </div>
<div> </div>
<div> </div>
<div> </div>
<div>
<div name="quote" style="margin: 10px 5px 5px 10px; padding: 10px 0px 10px 10px; border-left-color: rgb(195, 217, 229); border-left-width: 2px; border-left-style: solid; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div style="margin: 0px 0px 10px;"><b>Gesendet:</b> Samstag, 14. März 2015 um 17:46 Uhr<br/>
<b>Von:</b> "Mihai Moldovan" <ionic@ionic.de><br/>
<b>An:</b> "swizz ly" <swizz.ly@gmx.ch>, x2go-user@lists.x2go.org<br/>
<b>Betreff:</b> Re: [X2Go-User] X2Go Two-factor-authentication with SecurID</div>
<div name="quoted-content">On 14.03.2015 10:48 AM, swizz ly wrote:<br/>
> [...]<br/>
> I get the same results: no messages at the RSA console, if I make a<br/>
> normal SSH connection forcing password authentication:<br/>
> "ssh -o PreferredAuthentications=password -o PubkeyAuthentication=no<br/>
> user@server".<br/>
> Can it be that x2goclient forces the password authentication<br/>
> explicitely if there is no publickey?<br/>
<br/>
Maybe. I have to check. Will do this later.<br/>
<br/>
Shouldn't pam-radius also use password+keyboard-interactive, though?<br/>
Given that it works for Nick, I'm skeptical when it comes to x2goclient<br/>
forcing password auth. I may be wrong by assuming pam-radius does uses<br/>
keyboard-interactive authentication right after password authentication,<br/>
though.<br/>
<br/>
<br/>
<br/>
Mihai<br/>
</div>
</div>
</div>
</div></div></body></html>