Post a reply

Before posting, please read how to report bug or request support effectively.

Bug reports without an attached log file are usually useless.

Options
Add an Attachment

If you do not want to add an Attachment to your Post, please leave the Fields blank.

(maximum 10 MB; please compress large files; only common media, archive, text and programming file formats are allowed)

Options

Topic review

gt-jpdied

Duo (2FA) on RHEL 10 triggers additional Banner on WinSCP

When you connect to a RHEL 10 server using Duo (pam_duo) on RHEL 10, things start normally with getting the banner message of the system. It than asks for your username unless you have it set to auto use it, then your password, than it does the interaction to input your Duo code or have it do a Duo Push. At the very end though, it takes the "Success. Logging you in..." from Duo as a new Banner message, displaying it as a banner. Even if you check "Do not show this again", it just resets the next time you login showing the initial banner and then the success message at the end. I think this is because it takes the success message as a new banner, its only saving the hash of the success message and no longer remembers the initial banner notice.

This oddly didn't happen on previous versions of RHEL, it only started on RHEL 10 using Duo's provided pam_duo packages.