• Putty: can't login at bastion host with TOTP

    From wizard1024@gmail.com@21:1/5 to All on Thu Jan 18 09:51:51 2018
    Hello, all.

    I'm trying to connect via bastion host to ssh server.
    Bastion host accepting key authentication. As second factor auth it consider TOTP password.
    But when i use putty with Proxy command plink i see such error:

    proxy: Further authentication required
    proxy: Attempting keyboard-interactive authentication
    proxy: Keyboard-interactive authentication failed
    proxy: Access denied

    I download latest stable putty.
    If i run plink command from cmd - i get connection.

    Full log:
    Starting local proxy command: C:\Program Files (x86)\PuTTY\plink.exe -v user@xxx.xxx.xxx.xxx -nc yyy.yyy.yyy.yyy:22
    proxy: Connecting to xxx.xxx.xxx.xxx port 22
    proxy: We claim version: SSH-2.0-PuTTY_Release_0.70
    proxy: Server version: SSH-2.0-OpenSSH_7.6
    proxy: Using SSH protocol version 2
    proxy: Server supports delayed compression; will try this later
    proxy: Doing ECDH key exchange with curve Curve25519 and hash SHA-256
    proxy: Server also has ssh-ed25519/ecdsa-sha2-nistp256 host keys, but we don't know any of them
    proxy: Host key fingerprint is:
    proxy: ssh-rsa 2048 [secured]
    proxy: Initialised AES-256 SDCTR client->server encryption
    proxy: Initialised HMAC-SHA-256 client->server MAC algorithm
    proxy: Initialised AES-256 SDCTR server->client encryption
    proxy: Initialised HMAC-SHA-256 server->client MAC algorithm
    proxy: Pageant is running. Requesting keys.
    proxy: Pageant has 1 SSH-2 keys
    proxy: Using username "user".
    proxy: Trying Pageant key #0
    proxy: Authenticating with public key "xxx" from agent
    proxy: Sending Pageant's response
    proxy: Further authentication required
    proxy: Further authentication required
    proxy: Attempting keyboard-interactive authentication
    proxy: Keyboard-interactive authentication failed
    proxy: Access denied
    proxy: Attempting keyboard-interactive authentication

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)