bug#63246: 30.0.50; TRAMP with doas multi-hops

bug#63246: 30.0.50; TRAMP with doas multi-hops

[Manuel Giraud via Bug reports for GNU Emacs, the Swiss army knife of text editors]

Hi,

I have a bug when trying to access a remote ssh host and then doas on
it.  Here is the recipe starting from 'emacs -Q':

     C-x C-f /ssh:host|doas::
     ;; Enter wrong doas password (ssh authentication is done with a
     ;; key)

Here, I get a connection error because the doas authentication failed.
With another linux host and with sudo, Emacs re-ask for the password if
I entered a wrong one.

Best regards,


In GNU Emacs 30.0.50 (build 2, x86_64-unknown-openbsd7.3, cairo version
 1.17.8) of 2023-05-02 built on computer
Repository revision: 7d246c359cf3d25cab5134076e393c4d25015827
Repository branch: master
Windowing system distributor 'The X.Org Foundation', version 11.0.12101006
System Description: OpenBSD computer 7.3 GENERIC.MP#1125 amd64

Configured using:
 'configure --prefix=/home/manuel/emacs --bindir=/home/manuel/bin
 --with-x-toolkit=no --without-sound --without-compress-install
 CPPFLAGS=-I/usr/local/include LDFLAGS=-L/usr/local/lib'

Configured features:
CAIRO DBUS FREETYPE GIF GLIB GMP GNUTLS GSETTINGS HARFBUZZ JPEG JSON
LCMS2 LIBOTF LIBXML2 MODULES NOTIFY KQUEUE OLDXMENU PDUMPER PNG RSVG
SQLITE3 THREADS TIFF TREE_SITTER WEBP X11 XDBE XIM XINPUT2 XPM ZLIB

Important settings:
  value of $LC_ALL: en_US.UTF-8
  locale-coding-system: utf-8-unix

Major mode: Text

Minor modes in effect:
  display-time-mode: t
  display-battery-mode: t
  server-mode: t
  shell-dirtrack-mode: t
  override-global-mode: t
  repeat-mode: t
  desktop-save-mode: t
  global-eldoc-mode: t
  show-paren-mode: t
  electric-indent-mode: t
  mouse-wheel-mode: t
  menu-bar-mode: t
  file-name-shadow-mode: t
  global-font-lock-mode: t
  font-lock-mode: t
  blink-cursor-mode: t
  line-number-mode: t
  auto-fill-function: do-auto-fill
  indent-tabs-mode: t
  transient-mark-mode: t
  auto-composition-mode: t
  auto-encryption-mode: t
  auto-compression-mode: t

Load-path shadows:
/home/manuel/.emacs.d/elpa/ef-themes-0.11.0/theme-loaddefs hides /home/manuel/emacs/share/emacs/30.0.50/lisp/theme-loaddefs
/home/manuel/.emacs.d/elpa/transient-0.3.7/transient hides /home/manuel/emacs/share/emacs/30.0.50/lisp/transient

Features:
(shadow sort mail-extr emacsbug org-agenda org-indent idlwave
idlwave-help idlw-help org-element org-persist org-id org-refile
avl-tree oc-basic ol-eww eww xdg url-queue mm-url ol-rmail ol-mhe ol-irc
ol-info ol-gnus nnselect ol-docview doc-view jka-compr image-mode exif
ol-bibtex bibtex ol-bbdb ol-w3m ol-doi org-link-doi org ob ob-tangle
ob-ref ob-lob ob-table ob-exp org-macro org-src ob-comint org-pcomplete
org-list org-footnote org-faces org-entities ob-emacs-lisp ob-core
ob-eval org-cycle org-table ol org-fold org-fold-core org-keys oc
org-loaddefs org-version org-compat org-macs conf-mode vc-bzr vc-src
vc-sccs vc hi-lock vc-hg autorevert filenotify vc-git diff-mode
bug-reference paredit vc-cvs vc-rcs log-view pcvs-util sh-script smie
treesit executable view vc-dispatcher vc-svn pascal mule-util gnus-dired
time battery cus-load exwm-randr xcb-randr exwm-config ido exwm
exwm-input xcb-keysyms xcb-xkb exwm-manage exwm-floating xcb-cursor
xcb-render exwm-layout exwm-workspace exwm-core xcb-ewmh xcb-icccm xcb
xcb-xproto xcb-types xcb-debug server modus-operandi-theme modus-themes
zone speed-type url-http url-auth url-gw nsm compat ytdious mingus
libmpdee reporter edebug debug backtrace transmission color calc-bin
calc-ext calc calc-loaddefs rect calc-macs supercite regi ebdb-message
ebdb-gnus gnus-msg gnus-art mm-uu mml2015 mm-view mml-smime smime gnutls
dig gnus-sum shr pixel-fill kinsoku url-file svg dom gnus-group
gnus-undo gnus-start gnus-dbus gnus-cloud nnimap nnmail mail-source utf7
nnoo gnus-spec gnus-int gnus-range message sendmail yank-media puny
rfc822 mml mml-sec epa epg rfc6068 epg-config mm-decode mm-bodies
mm-encode mail-parse rfc2231 rfc2047 rfc2045 ietf-drums gmm-utils
mailheader gnus-win gnus nnheader gnus-util mail-utils range mm-util
mail-prsvr wid-edit ebdb-mua ebdb-com crm ebdb-format ebdb mailabbrev
eieio-opt speedbar ezimage dframe find-func eieio-base pcase timezone
visual-basic-mode cl web-mode derived disp-table erlang-start
smart-tabs-mode skeleton cc-mode cc-fonts cc-guess cc-menus cc-cmds
cc-styles cc-align cc-engine cc-vars cc-defs slime-asdf grep slime-tramp
tramp rx tramp-loaddefs trampver tramp-integration files-x tramp-compat
shell pcomplete parse-time iso8601 time-date ls-lisp format-spec
slime-fancy slime-indentation slime-cl-indent cl-indent
slime-trace-dialog slime-fontifying-fu slime-package-fu slime-references
slime-compiler-notes-tree advice slime-scratch slime-presentations
bridge slime-macrostep macrostep slime-mdot-fu slime-enclosing-context
slime-fuzzy slime-fancy-trace slime-fancy-inspector slime-c-p-c
slime-editing-commands slime-autodoc slime-repl slime-parse slime
apropos compile text-property-search etags fileloop generator xref
project arc-mode archive-mode noutline outline icons pp comint ansi-osc
ansi-color ring hyperspec thingatpt slime-autoloads edmacro kmacro
use-package-bind-key bind-key appt diary-lib diary-loaddefs cal-menu
calendar cal-loaddefs dired-x dired-aux dired dired-loaddefs
notifications dbus xml cl-extra help-mode use-package-core repeat
easy-mmode desktop frameset rust-mode-autoloads speed-type-autoloads
osm-autoloads ebdb-autoloads compat-autoloads magit-autoloads
debbugs-autoloads git-commit-autoloads magit-section-autoloads
ef-themes-autoloads with-editor-autoloads paredit-autoloads
dash-autoloads ytdious-autoloads transmission-autoloads
transient-autoloads exwm-autoloads hyperbole-autoloads
detached-autoloads info package browse-url url url-proxy url-privacy
url-expand url-methods url-history url-cookie generate-lisp-file
url-domsuf url-util mailcap url-handlers url-parse auth-source cl-seq
eieio eieio-core cl-macs password-cache json subr-x map byte-opt gv
bytecomp byte-compile url-vars cl-loaddefs cl-lib rmc iso-transl tooltip
cconv eldoc paren electric uniquify ediff-hook vc-hooks lisp-float-type
elisp-mode mwheel term/x-win x-win term/common-win x-dnd tool-bar dnd
fontset image regexp-opt fringe tabulated-list replace newcomment
text-mode lisp-mode prog-mode register page tab-bar menu-bar rfn-eshadow
isearch easymenu timer select scroll-bar mouse jit-lock font-lock syntax
font-core term/tty-colors frame minibuffer nadvice seq simple cl-generic
indonesian philippine cham georgian utf-8-lang misc-lang vietnamese
tibetan thai tai-viet lao korean japanese eucjp-ms cp51932 hebrew greek
romanian slovak czech european ethiopic indian cyrillic chinese
composite emoji-zwj charscript charprop case-table epa-hook
jka-cmpr-hook help abbrev obarray oclosure cl-preloaded button loaddefs
theme-loaddefs faces cus-face macroexp files window text-properties
overlay sha1 md5 base64 format env code-pages mule custom widget keymap
hashtable-print-readable backquote threads dbusbind kqueue lcms2
dynamic-setting system-font-setting font-render-setting cairo xinput2 x
multi-tty make-network-process emacs)

Memory information:
((conses 16 678885 57739)
 (symbols 48 55536 2)
 (strings 32 172610 6570)
 (string-bytes 1 5465635)
 (vectors 16 103514)
 (vector-slots 8 2173360 177977)
 (floats 8 519 144)
 (intervals 56 18149 100)
 (buffers 984 104))

-- 
Manuel Giraud

bug#63246: 30.0.50; TRAMP with doas multi-hops

[Michael Albinus]

Manuel Giraud via "Bug reports for GNU Emacs, the Swiss army knife of
text editors" <bug-gnu-emacs@gnu.org> writes:

> Hi,

Hi Manuel,

> I have a bug when trying to access a remote ssh host and then doas on
> it.  Here is the recipe starting from 'emacs -Q':
>
>      C-x C-f /ssh:host|doas::
>      ;; Enter wrong doas password (ssh authentication is done with a
>      ;; key)
>
> Here, I get a connection error because the doas authentication failed.
> With another linux host and with sudo, Emacs re-ask for the password if
> I entered a wrong one.

The difference is between the sudo and doas programs. sudo does the
following:

--8<---------------cut here---------------start------------->8---
# sudo command
[sudo] password for albinus:
Sorry, try again.
[sudo] password for albinus:
--8<---------------cut here---------------end--------------->8---

And doas does:

--8<---------------cut here---------------start------------->8---
# doas command
doas (albinus@gandalf) password:
doas: Authentication failed
#
--8<---------------cut here---------------end--------------->8---

While sudo asks to reenter the password, doas simply gives up after the
first error. This is what you see in Tramp.

Well, there is a doas issue in its bug tracker to change this behaviour:
<https://github.com/Duncaen/OpenDoas/pull/102>. Once this has arrived
our systems, doas (in Tramp) shall be have like sudo wrt reentering a
wrong password.

I guess we can close this (Tramp) bug.

> Best regards,

Best regards, Michael.

bug#63246: 30.0.50; TRAMP with doas multi-hops

[Manuel Giraud via Bug reports for GNU Emacs, the Swiss army knife of text editors]

Michael Albinus <michael.albinus@gmx.de> writes:

[...]

> While sudo asks to reenter the password, doas simply gives up after the
> first error. This is what you see in Tramp.
>
> Well, there is a doas issue in its bug tracker to change this behaviour:
> <https://github.com/Duncaen/OpenDoas/pull/102>. Once this has arrived
> our systems, doas (in Tramp) shall be have like sudo wrt reentering a
> wrong password.

Hi Michael and thanks for your research,

I had a look at this PR and it proposed to integrate a patch from
upstream doas (which is into the OpenBSD tree) that dates back to
september 2021.  I'm using TRAMP to access recent OpenBSD systems (7.3)
and this patch is already here.  Here's what I get by default (doas asks
for password 3 times):

$ doas -s
doas (manuel@computer) password: 
doas: Authentication failed
doas (manuel@computer) password: 
doas: Authentication failed
doas (manuel@computer) password: 
doas: Authentication failed
$

So I think that TRAMP needs to take this into account.

Best regards,
-- 
Manuel Giraud

bug#63246: 30.0.50; TRAMP with doas multi-hops

[Manuel Giraud via Bug reports for GNU Emacs, the Swiss army knife of text editors]

Sorry, forgot my previous message.  This behaviour only shows with doas
on linux boxes (not on openbsd ones).  So, I guess that yes we just need
to wait 😅
-- 
Manuel Giraud

bug#63246: 30.0.50; TRAMP with doas multi-hops

[Michael Albinus]

Manuel Giraud <manuel@ledu-giraud.fr> writes:

Hi Manuel,

> Sorry, forgot my previous message.  This behaviour only shows with doas
> on linux boxes (not on openbsd ones).  So, I guess that yes we just need
> to wait 😅

Thanks. So I'm closing the bug.

Best regards, Michael.