SSH - Keyboard Interactive Authentication

[KevinA-REJIS]

We have several Dell PowerEdge servers with iDRAC connections. We've previously been able to scan them with SSH credentials, but now we're experiencing a problem.

We recently updated the drivers/firmware on the servers, including iDRAC. Following this, Lansweeper has been unable to scan iDRAC (seems limited to iDRAC8, version 2.70.70.70), saying it cannot connect to SSH with the supplied credentials. After doing some digging, I found in the release notes for that iDRAC version that keyboard interactive authentication has been enabled in its SSH server, requiring both password and keyboard to log in (confirmed when trying to connect with PuTTY).

Is there any way around this?



Link to release notes:

https://topics-cdn.dell.com/pdf/idracv2_70rn_en-us.pdf

[blackmoonwolf]

Hey @Lansweeper. Are you guys bloody DEAD or something?

[blackmoonwolf]

Sooo... This thread has aged. I've submitted "feature requests" that may or may not actually get any consideration.

Are we ever going to get ANY kind of response here? Anything?

[blackmoonwolf]

Where are we at on this? It's still a roadblock.

[blackmoonwolf]

Also of interest is one individual who coded a workaround for it. (He has also been commenting on the Dell thread.)

https://stackoverflow.com/questions/63040634/connecting-ssh-client-with-paramiko-using-python-to-dell-idrac-fails-keyboard-in#new-answer?newreg=d21fdca6bfb94f9e8f9881ebafe8284f

Obviously there doesn't seem to be a way to leverage this in the Lansweeper software/interface from our end. But perhaps it may shed some insight on a solution for the folks at Lansweeper who will provide a solution to this problem.

[blackmoonwolf]

I have emailed support@lansweeper.com directly for a "feature request" to mitigate this issue.

[KevinA-REJIS]

A Dell mod responded on the support forums, they are not aware of a method to turn it off.

https://www.dell.com/community/Systems-Management-General/iDRAC8-2-70-70-70-SSH-keyboard-interactive-authentication/m-p/7427565#M28321

I will send an email to Lansweeper support.

[blackmoonwolf]

KevinA-REJIS wrote:
A Dell mod responded on the support forums, they are not aware of a method to turn it off.

https://www.dell.com/community/Systems-Management-General/iDRAC8-2-70-70-70-SSH-keyboard-interactive-authentication/m-p/7427565#M28321

I will send an email to Lansweeper support.

Given the last two responses that I've been given on that thread, they are outright ignoring the plea to give us the option to disable this extremely inconvenient feature.

I'm quite irate with Dell right now.

[blackmoonwolf]

I, too, am now unable to get Lansweeper to auth into the iDRAC7 (2.65.65.65) or iDRAC8 (2.70.70.70). I have also commented on the Dell support thread linked by the OP.

[Esben_D]

If you can't turn this off, it might be a good idea to contact the support team and let them know, just in case I miss it. That way we can start looking into it more.