2FA support for SSH Port forwarding (tunneling)

[Nidwan]

Hello,
Is there a way to support 2FA when creating a SSH Port forwarding ? If not, is there any plan to support it ?
Thanks !

[isontheline]

Hey @Nidwan 👋

Thank you so much for reaching out and for your feedback 🙏

Since #422 WebSSH should support 2FA for port forwarding (except multiple ports #724).

Are you using single-port forward?

Arnaud

Want to help me to support WebSSH development? I’d love some coffee and sponsors!

WebSSH isn't a subscription based app (you buy it for lifetime) but if you like my work and want to support me further, you can become a sponsor or you can just buy me a tiny coffee ☕️

[Nidwan]

Thanks a lot for your blazing fast reply 😯

Unfortunately I cannot find the 2FA field from the Forwardings tab on iOS. Am I looking at the wrong place ?

[isontheline]

Are you talking about the "Force Keyboard Interactive" toggle shown inside SSH connection form?
Normally the server transmits to WebSSH the fact that it wants to perform a challenge.
Could you post the error log to be sure?

[Nidwan]

It seems not (or maybe I’m doing something wrong). The same credentials work in the Servers tab but in the Forwarding tab it cannot connect.

Here are the logs

[isontheline]

Thanks a lot for your feedback!
I will try to reproduce and fix this issue

[Nidwan]

Hi Arnaud,
Did you find time to investigate? Do you have any idea when authentication with 2FA will work when opening an SSH tunnel?
Thanks a lot for your feedback :)
Lucas

[isontheline]

Hey Lucas 👋

Thanks for your up!

Yes I'm working on 2 MFA issues at same time :

• Yours 2FA support for SSH Port forwarding (tunneling) #1310
  and
• MFA / 2FA doesn't work anymore with latest Ubuntu 24 and Duo authentication #1312

Not related but on same scope so I can spend more time on them

I don't have any ETA yet but I'll try to do my best 🤞

[Nidwan]

Great, thanks 🙏

[isontheline]

I'm encountering a strange behaviour :
I've setup Duo PAM for MFA and it works great with SSH + SFTP (it asks for passcode)
But when using Port Forwarding, Duo doesn't ask anything and allow the connection
I need to find where I missed an important step of setup