francoismichel / francoismichel/ssh3
Too low OIDC information for debugging
- Dominant language
- Go
- Stars
- 5k
- Forks
- 118
- PR merge metrics
- No merged PRs in 30d
Description
I'm trying to configure OIDC (keycloak) with ssh3.
Following to readme, done authorized_identities and oidc_config.json
`"issuer_url": "https://keycloakdomain/realms/master"`
When trying connect to server with parameters:
`.\ssh3.exe -use-oidc https://keycloakdomain/realms/master user@server/verysecret`
Getting error:
`ERR could not establish SSH3 conversation: no suitable identity found`
Which identity wanted by server? In which scopes and parameters it looking for? Verbose flag can't answer this questions. For now it's impossible to debug this feature :(
Contributor guide
No contributing guide indexed for this repository
Research direction
Start with the README's OIDC setup, including authorized_identities and oidc_config.json, then trace the handling of the -use-oidc connection and verbose flag. Done should make failed OIDC authentication explain which identity, scopes, or parameters the server expected, so the reported no-suitable-identity error can be diagnosed.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- authentication, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100