francoismichel / francoismichel/ssh3

Too low OIDC information for debugging

Open
#99 12 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
5k
Forks
118
PR merge metrics
No merged PRs in 30d

Description

I'm trying to configure OIDC (keycloak) with ssh3.
Following to readme, done authorized_identities and oidc_config.json
`"issuer_url": "https://keycloakdomain/realms/master"`

When trying connect to server with parameters:
`.\ssh3.exe -use-oidc https://keycloakdomain/realms/master user@server/verysecret`

Getting error:
`ERR could not establish SSH3 conversation: no suitable identity found`

Which identity wanted by server? In which scopes and parameters it looking for? Verbose flag can't answer this questions. For now it's impossible to debug this feature :(

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the README's OIDC setup, including authorized_identities and oidc_config.json, then trace the handling of the -use-oidc connection and verbose flag. Done should make failed OIDC authentication explain which identity, scopes, or parameters the server expected, so the reported no-suitable-identity error can be diagnosed.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
authentication, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.