pseudo-tty option available in WinSCP? :: Support Forum

harkman
Joined:: 2012-03-14
Posts:: 12
Location:: Germany

pseudo-tty option available in WinSCP?

2014-10-17 08:33

Hello.

Unix ssh client has a option to create a pseudo-tty when establishing a new connection (ssh -t).

Can this be done with WinSCP too?

Background:
We use a CentOS 6 and have blocked root login with SSH
I try to setup the login with WinSCP with a unprivileged user and the doing sudo like described here: How do I change user after login (e.g. su root)?

Problem now is that WinSCP cannot establish a connection because sudo is only allowed if a proper shell is created. Sudo configuration explains:

#
# Disable "ssh hostname sudo <cmd>", because it will show the password in clear.
#         You have to run "ssh -t hostname sudo <cmd>".
#
Defaults    requiretty

As I really do not want to expose any passwords I'd like to keep the sudo config this way.

Reply with quote

martin◆ Site Admin
Joined:: 2002-12-10
Posts:: 41,392
Location:: Prague, Czechia

Re: pseudo-tty option available in WinSCP?

2014-10-20

You cannot use requiretty with WinSCP.
See How do I change user after login (e.g. su root)?

Reply with quote

Skeeve
Joined:: 2014-10-17
Posts:: 12

2014-10-20 09:49

Maybe this is a valid workaround for you?
WinSCP askpass tips please

Reply with quote

harkman

2014-10-20 10:05

@Skeeve: Thanks for the link. I will try this eventually. For now we switched to public key based authorisation and disabled password auth. I think this way we can disable requiretty without breaching security.

Reply with quote

Skeeve

2014-10-20 10:30

@harkman: Publickey is better for SSH anyway. For sudo, if you can live without the additional password – great. In my environment I can't switch it off. That's why I had to find a workaround.

Reply with quote