Multi-factor authentication (password and key) with Paramiko

by

Sorry for the late response but this problem was really hard to find any information on so i wanted to post a solution for anyone else stuck on this issue.

After pulling my hair out trying to solve this I found a solution thanks to some code posted by Doug Ellwanger and Daniel Brownridge. The problem seems to be caused by the way the multi-factor authentication is handled using more of an interactive style.

import paramiko
import threading

... 

username="..."
password = '...'
file_path="..."
pkey = paramiko.RSAKey.from_private_key_file(file_path)
sftpClient = multifactor_auth('...', 22, username, pkey, password)

...

def multifactor_auth_sftp_client(host, port, username, key, password):
    #Create an SSH transport configured to the host
    transport = paramiko.Transport((host, port))
    #Negotiate an SSH2 session
    transport.connect()
    #Attempt authenticating using a private key
    transport.auth_publickey(username, key)
    #Create an event for password auth
    password_auth_event = threading.Event()
    #Create password auth handler from transport
    password_auth_handler = paramiko.auth_handler.AuthHandler(transport)
    #Set transport auth_handler to password handler
    transport.auth_handler = password_auth_handler
    #Aquire lock on transport
    transport.lock.acquire()
    #Register the password auth event with handler
    password_auth_handler.auth_event = password_auth_event
    #Set the auth handler method to 'password'
    password_auth_handler.auth_method = 'password'
    #Set auth handler username
    password_auth_handler.username = username
    #Set auth handler password
    password_auth_handler.password = password
    #Create an SSH user auth message
    userauth_message = paramiko.message.Message()
    userauth_message.add_string('ssh-userauth')
    userauth_message.rewind()
    #Make the password auth attempt
    password_auth_handler._parse_service_accept(userauth_message)
    #Release lock on transport
    transport.lock.release()
    #Wait for password auth response
    password_auth_handler.wait_for_response(password_auth_event)
    #Create an open SFTP client channel
    return transport.open_sftp_client()

I hope this helps, it worked for my project.

More Related Contents:

  1. Reading file opened with Python Paramiko SFTPClient.open method is slow
  2. Paramiko’s SSHClient with SFTP
  3. How to list all the folders and files in the directory after connecting through SFTP in Python
  4. Password authentication in Python Paramiko fails, but same credentials work in SSH/SFTP client
  5. List files on SFTP server matching wildcard in Python using Paramiko
  6. How to scp in Python?
  7. Some Unix commands fail with ” not found”, when executed using Python Paramiko exec_command
  8. Environment variable differences when using Paramiko
  9. Pass input/variables to command/script over SSH using Python Paramiko
  10. How to use Paramiko logging?
  11. Paramiko ssh die/hang with big output
  12. Running interactive commands in Paramiko
  13. Executing command using Paramiko exec_command on device is not working
  14. What is the difference between exec_command and send with invoke_shell() on Paramiko?
  15. Command executed with Paramiko does not produce any output
  16. Read a file from server with SSH using Python
  17. Directory transfers with Paramiko
  18. Port forwarding with Paramiko
  19. SSH key generated by ssh-keygen is not recognized by Paramiko: “not a valid RSA private key file”
  20. Run multiple commands in different SSH servers in parallel using Python Paramiko
  21. Executing command using “su -l” in SSH using Python
  22. Execute command and wait for it to finish with Python Paramiko
  23. How to run sudo with Paramiko? (Python)
  24. Paramiko authentication fails with “Agreed upon ‘rsa-sha2-512’ pubkey algorithm” (and “unsupported public key algorithm: rsa-sha2-512” in sshd log)
  25. Recursive directory download with Paramiko?
  26. How to create a SSH tunnel using Python and Paramiko?
  27. Paramiko: read from standard output of remotely executed command
  28. How can you get the SSH return code using Paramiko?
  29. Why does Paramiko hang if you use it while loading a module?
  30. How to execute a script remotely in Python using SSH?

Leave a Comment