WinSCP using CAC reader

We are using PuTTY 0.76-1 with WinSCP 5.19.2 with CAC readers. We have no problem using PuTTY to prompt for a pin and authenticate against a Linux server. However, we cannot do this with WinSCP, even if we import the sessions from PuTTY.

This is on Windows Desktop 2016, connecting to RHEL 7 and 8 Servers.

When we try to login using WinSCP, it authenticates enough to get the /etc/motd, says that it it is authenticating, "Using username "useruser"", then puts up a password prompt -not a pin prompt. Then WinSCP says "Server refused our key" and "Access denied" and prompts for the password.

On the server side, we get the following in /var/log/secure: "error: PAM: Authentication failure for useruser."

If we use WinSCP to "Open in PuTTY" it works as expected, we are prompted for a pin and we can login without issue.

How can we get WinSCP to work with the CAC reader or use PuTTY to authenticate? Thanks.

Please post full WinSCP session log and PuTTY event log.

Here are the logs, thank you.

PuTTY event log please.

martin wrote:

Please post full WinSCP session log and PuTTY event log.

That's the same log as before. I'm asking for PuTTY event log. Connect, right-click PuTTY window title and select Event Log.

I increased the logging and made new logs. I hope this helps.

But that's not the official PuTTY that you are using, right? That might be the putty-cac?
https://github.com/NoMoreFood/putty-cac

Yes. So that's the problem. Thanks for your help.