Password is sent automatically when it shouldn't be sent about kitty HOT 10 CLOSED

Adding line "UserPassSSHNoSave=yes" into kitty.ini section "[KiTTY]" has finaly solved the agony.
Open kitty.ini and add the line into section "KiTTY]"...
[KiTTY]
UserPassSSHNoSave=yes

Unfortunately it doesn't work for me. After using my Yubikey, KiTTY is storing its value and re-using as password. FYI, password is NOT saved, it's empty.

Keyboard-interactive authentication prompts from server:
| Use your Yubi:
| Password:
Send automatic password (Using keyboard-interactive authentication)
End of keyboard-interactive prompts from server
Access denied
Keyboard-interactive authentication prompts from server:
| Use your Yubi:

In my kitty.ini I actually have two lines ...
UserPassSSHNoSave=yes
userpasssshnosave=yes
Maybe it's the second line which is doing the trick (I haven't tried that).

from kitty.

I've experienced exactly this same issue, so I would like to see it fixed as well :)

from kitty.

I have the same issue. We use a special PAM module with SSH, so first it asks for a UN, then Auth Code, then Password, so strguntbr's patch is not enough for me sadly. So yeah, still looking for a fix. Thanks.

from kitty.

Not sure if I should pile on this ticket, but this behavior also caused a problem for me. I have a server I was trying to log into and my password had expired, so it was trying to prompt me to enter a new password, but KiTTY v0.71.0.7p kept doing the "Send Automatic Password (Using keyboard-interactive authentication)"-thing and prevented me from successfully changing the password, which then ultimately prevented me from being able to log in.

It also looks like KiTTY suppressed at least one line of output from the server, too (about the password expiration):

I was able to successfully set a new password and log in using .72 of PuTTY, however:

from kitty.

I have the same problem with 2FA (Google authenticator).
My servers are setup to first ask for verification code and then for password, but KiTTY somehow does not relay my inputs to the servers. This stopped working with 0.71
PuTTY works fine to connect to same servers.

from kitty.

Hi, I have the same issue. The password is sent with 2FA activated, so I'm not able to type in the verification code. I have to use putty for that server, there it works fine.

from kitty.

Adding line "UserPassSSHNoSave=yes" into kitty.ini section "[KiTTY]" has finaly solved the agony.

Open kitty.ini and add the line into section "KiTTY]"...
[KiTTY]
UserPassSSHNoSave=yes

from kitty.

Adding line "UserPassSSHNoSave=yes" into kitty.ini section "[KiTTY]" has finaly solved the agony.

Open kitty.ini and add the line into section "KiTTY]"...
[KiTTY]
UserPassSSHNoSave=yes

Unfortunately it doesn't work for me. After using my Yubikey, KiTTY is storing its value and re-using as password. FYI, password is NOT saved, it's empty.

Keyboard-interactive authentication prompts from server:
| Use your Yubi:
| Password:
Send automatic password (Using keyboard-interactive authentication)
End of keyboard-interactive prompts from server
Access denied
Keyboard-interactive authentication prompts from server:
| Use your Yubi:

from kitty.

HA! You are right! There is a bug in kitty.c, it should be case insensitive, but is not.

	if( ReadParameter( INIT_SECTION, "userpasssshnosave", buffer ) ) { 
		if( !stricmp( buffer, "no" ) ) SetUserPassSSHNoSave(0) ;
		if( !stricmp( buffer, "yes" ) ) SetUserPassSSHNoSave(1) ;
	}

from kitty.

Hi @cyd01 ,

Please, can do you check with case insensitive with the INI parameters?

In any case, I suggest to close this issue as the original problem is fixed.
Thank you to all!

from kitty.